meme3d Privacy Policy

meme3d ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who register accounts and use the services available at meme3d.club ("the Platform"). This Privacy Policy sets out in full detail our practices with respect to the collection, use, storage, disclosure, and protection of personal data provided by registered players and visitors to the Platform.

The primary market meme3d serves is Indonesia, with particular focus on English-preference players located in cities including Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, and Makassar. Our payment infrastructure connects directly to Indonesian banking institutions and domestic e-wallet providers. In light of this market focus, meme3d's data handling practices take into account the requirements applicable to services operating for and serving Indonesian consumers, alongside internationally recognised data protection principles.

meme3d processes personal data in accordance with internationally recognised privacy principles, including purpose limitation, data minimisation, storage limitation, accuracy, integrity, confidentiality, and accountability. These principles guide every aspect of our data operations, from initial collection at registration through to secure deletion at the end of applicable retention periods.

meme3d collects Personal Data in the categories set out below. The specific data collected from any individual player depends on the stage of their relationship with the Platform and the services they use.

3.1 Registration Data

When you create a meme3d account, we collect: your full legal name (as it appears on your Indonesian National Identity Card — KTP); your email address; your Indonesian mobile telephone number; your date of birth; your preferred username; a hashed version of your chosen password (meme3d never stores passwords in plain text); and your self-declared country of residence (Indonesia).

3.2 Identity Verification (KYC) Data

To comply with internationally applicable anti-money laundering (AML) standards and to enforce our 21+ age restriction, meme3d is required to verify your identity before processing withdrawals. KYC data collected includes: a scan or photograph of your Indonesian National Identity Card (KTP); a live selfie photograph of you holding your KTP; and in some cases, a photograph of your bank passbook or e-wallet account screen to verify payment method ownership. This data is processed by meme3d's designated KYC service provider under a written data processing agreement.

3.3 Financial Transaction Data

meme3d records all financial transactions on your account, including: deposit amounts, dates, and originating payment method (e.g., BCA transfer, GoPay transaction); withdrawal requests, amounts, approval dates, and destination payment method; and bonus credits, wagering activity against bonuses, and bonus forfeitures. We do not store your full bank account numbers or e-wallet account credentials — these are handled entirely by the respective payment processors.

3.4 Gaming Activity Data

We maintain records of all gaming activity on your meme3d account, including: games played, bet amounts, game outcomes, session durations, and responsible gaming tool usage. These records are maintained for the purposes of account management, dispute resolution, responsible gaming monitoring, AML compliance, and Platform improvement.

3.5 Technical and Device Data

When you access meme3d, our systems automatically collect certain technical data, including: your IP address; browser type and version; operating system; device type (mobile, tablet, desktop); screen resolution; referring URL; pages visited and time spent; session timestamps; and login history. This data is used for security monitoring, fraud prevention, and Platform optimisation.

3.6 Communications Data

If you contact meme3d support via live chat or email, we retain records of that communication — including your messages, the agent's responses, and any attachments submitted — for quality assurance, training, and dispute resolution purposes. Support communications are retained for a minimum of 24 months from the date of the interaction.

meme3d collects Personal Data through the following channels and mechanisms:

• Directly from you — through the account registration form, the KYC document upload process, deposit and withdrawal request forms, support chat interactions, and any feedback or survey responses you submit voluntarily.
• Automatically — through server logs, session tracking technology, and first-party cookies placed on your device when you visit meme3d.club (see Clause 11 for full cookie details).
• From payment providers — when you initiate a deposit or withdrawal, meme3d receives a transaction confirmation from the relevant Indonesian bank (e.g., BRI, Mandiri) or e-wallet provider (e.g., OVO, DANA) containing the transaction reference, amount, timestamp, and masked payment account identifier.
• From KYC providers — our designated KYC service provider returns a verification status (verified / pending / rejected) and a risk rating to meme3d after processing submitted identity documents. The full document images are stored by the KYC provider under our data processing agreement.
• From fraud and AML screening tools — meme3d uses third-party risk screening tools that may cross-reference submitted registration data against publicly available sanctions lists, politically exposed persons (PEP) databases, and adverse media sources.

meme3d processes Personal Data for the following specific purposes only:

meme3d does not use Personal Data for automated decision-making that produces significant legal or similarly significant effects on individual players, except in the context of AML and fraud-prevention screening where automated risk flagging may result in an account being placed under manual review. Any account subject to a hold as a result of automated screening will be reviewed by a human agent within 48 hours.

meme3d processes Personal Data on the following legal bases:

• Contractual necessity: Processing your Registration Data, Financial Transaction Data, and Gaming Activity Data is necessary to perform the contract between meme3d and you as a registered player — specifically, to operate your account, process deposits and withdrawals, and deliver the gaming services you have requested.
• Legal obligation: Processing your KYC Data and subjecting your account to AML and fraud screening is necessary for meme3d to comply with applicable international AML, counter-terrorism financing (CTF), and responsible gaming obligations.
• Legitimate interests: Processing Technical and Device Data for Platform security, fraud prevention, abuse detection, and aggregated analytics is carried out on the basis of meme3d's legitimate interest in maintaining a secure and reliable platform for all registered players. This interest is balanced against the privacy interests of individual players and does not override those interests.
• Consent: Sending direct marketing communications (promotional emails, bonus notifications, SMS messages) is carried out solely on the basis of your explicit opt-in consent, which you may withdraw at any time.

7.1 Trusted Data Processors. meme3d shares Personal Data with the following categories of Data Processor, strictly for the purposes described in this Policy and under written data processing agreements that require processors to maintain appropriate security standards:

• KYC / Identity Verification Providers: Third-party services that verify the authenticity of identity documents and perform age verification checks.
• Payment Processors: Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) who process deposit and withdrawal instructions on meme3d's behalf.
• Cloud Infrastructure Providers: Hosting and storage providers who store Platform data on servers protected by industry-standard security controls.
• AML and Fraud Screening Tools: Risk-intelligence platforms that cross-reference player data against sanctions and PEP lists.
• Customer Support Platform: The live chat and ticketing system used by meme3d's support team to manage player communications.

7.2 Legal Disclosure. meme3d will disclose Personal Data to competent authorities, law enforcement agencies, or courts where it is legally required to do so by a valid and lawful order, warrant, or regulatory instruction. meme3d will notify affected players of such disclosures where legally permitted to do so.

7.3 No Commercial Data Sales. meme3d does not sell, rent, trade, or otherwise transfer Personal Data to any unaffiliated third party for their own commercial or marketing purposes. This commitment is absolute and not subject to any commercial exception.

meme3d's primary player base is located in Indonesia. Some of our Data Processors — particularly cloud infrastructure and KYC providers — may process data on servers located outside Indonesia. Where such transfers occur, meme3d ensures that appropriate safeguards are in place, including contractual data protection clauses binding processors to standards equivalent to internationally recognised data protection best practice.

All financial transaction data relating to Indonesian banking channels and e-wallet providers is processed within Indonesia's domestic payment infrastructure and is not subject to international transfer beyond what is inherent to the relevant payment network's technical operation.

meme3d retains Personal Data for as long as is necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods driven by legal and operational requirements:

Upon expiry of the applicable retention period, meme3d will securely delete or anonymise the relevant Personal Data so that it can no longer be attributed to an identified or identifiable individual. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

meme3d implements a layered security architecture to protect Personal Data against unauthorised access, alteration, disclosure, and destruction:

• Encryption in Transit: All data exchanged between your browser/app and meme3d servers is encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms this connection is active.
• Encryption at Rest: Sensitive Personal Data stored in meme3d's databases — including KYC documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
• Password Security: Player passwords are never stored in plain text. meme3d uses industry-standard cryptographic hashing with salting (bcrypt or equivalent) to store password credentials.
• Two-Factor Authentication (2FA): meme3d supports 2FA for all registered accounts. Players are strongly encouraged to enable 2FA through their account security settings to add an additional layer of protection against unauthorised login.
• Access Controls: Access to production systems containing Personal Data is restricted to authorised meme3d staff on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for system access.
• Security Monitoring: meme3d operates continuous security monitoring of its infrastructure, including intrusion detection, anomaly detection, and regular penetration testing by qualified third-party security professionals.

11.1 What Are Cookies. Cookies are small text files placed on your device by a website you visit. They are widely used to make websites function efficiently and to provide information to the site operator. meme3d uses first-party cookies only — we do not deploy third-party advertising cookies or cross-site tracking technologies.

11.2 Cookies Used by meme3d. The cookies placed by meme3d fall into the following categories:

• Essential / Strictly Necessary Cookies: These cookies are required for the Platform to function. They maintain your login session, preserve your language and display preferences, and provide security token validation (CSRF protection). These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: These cookies remember choices you make on the Platform — such as your preferred game category, responsible gaming reminder settings, and deposit limit configurations — so that these preferences persist across sessions.
• Analytics Cookies: meme3d uses first-party analytics cookies to understand how players navigate the Platform — for example, which games are most frequently accessed, where players encounter friction in the deposit flow, and how long sessions typically last. This data is processed in aggregate and anonymised form and is used solely to improve the Platform experience.
• Security Cookies: These cookies help meme3d detect and prevent fraudulent activity, such as account takeover attempts and automated bot traffic, by recording device fingerprint signals and login behaviour patterns.

11.3 Managing Cookies. You can control cookie settings through your browser's privacy controls. Blocking essential cookies will prevent you from logging into your meme3d account. Blocking functional or analytics cookies will not affect your access to the Platform but may reduce the personalisation of your experience.

As a meme3d player, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact meme3d at [email protected] with the subject line "Data Rights Request" and your registered email address:

meme3d will acknowledge all data rights requests within 72 hours and provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, the response period may be extended by a further 30 days, with written notification to you.

meme3d does not knowingly collect Personal Data from any person under the age of 21. The Platform is strictly intended for adults aged 21 and above. Age verification — carried out as part of the KYC process — is a mandatory step before any withdrawal is processed, and meme3d reserves the right to request age verification at registration or at any earlier stage.

If meme3d becomes aware that Personal Data has been collected from a person under 21 years of age, all data associated with that account will be securely deleted, the account will be closed, and any funds deposited will be returned to the originating payment method. If you are a parent or guardian and believe that a minor in your care has registered a meme3d account, please contact [email protected] immediately.

meme3d sends promotional communications — including bonus offers, seasonal promotions (e.g., Idul Fitri, Ramadhan, Indonesian Independence Day campaigns), new game announcements, and tournament invitations — only to players who have explicitly opted in to receive such communications at registration or through their account settings.

Marketing communications are sent via email to your registered email address and, where you have additionally consented, via SMS to your registered Indonesian mobile number. Each marketing communication includes a clear and functional opt-out link. You may also withdraw marketing consent at any time by logging into your meme3d account, navigating to Communication Preferences, and deselecting all marketing channels. Opt-out requests are processed within 5 business days, after which no further marketing communications will be sent.

Withdrawing marketing consent does not affect your ability to receive transactional communications — such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts — which are sent regardless of marketing preference as they are necessary for account operation.

The meme3d Platform may contain references or links to third-party services — for example, the game studios (Pragmatic Play, Evolution Gaming, PG Soft) whose games are accessible through the meme3d lobby. These studios operate their own privacy policies that govern data processed within their game environments. meme3d recommends that players review the privacy policies of any third-party game studio whose games they access via the meme3d lobby.

meme3d is not responsible for the privacy practices of any third party, including game studios, payment processors, or any other external service. The meme3d Privacy Policy applies solely to data collected and processed by meme3d directly through the meme3d.club domain and its associated services.

meme3d reserves the right to update or revise this Privacy Policy at any time. Where changes are material — for example, introducing new categories of data collection, new processing purposes, new data sharing arrangements, or significant changes to retention periods — meme3d will provide at least fourteen (14) days' advance notice to registered players via email to their registered email address.

Minor updates — such as clarifying language, correcting typographical errors, or updating contact details — may be made without advance notice, though the "Last Updated" date at the top of this Policy will be revised to reflect the change. The current version of this Policy is always accessible from the footer of every page on meme3d.club. Your continued use of the Platform following the effective date of a revised Policy constitutes acceptance of that revised Policy.

This Privacy Policy was last updated on 1 January 2026.

For any questions, concerns, or requests relating to this Privacy Policy or to the Personal Data meme3d holds about you, please contact our team through the following channels:

meme3d is committed to resolving all privacy-related queries and complaints promptly and fairly. If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to an independent dispute resolution body or relevant regulatory authority with jurisdiction over data protection matters in your territory. meme3d will cooperate fully with any such process.

If you believe your data rights have been violated and you are unable to resolve the matter directly with meme3d, you may also seek legal advice regarding your options under applicable data protection law in your jurisdiction.