Privacy Policy — ayu88

1 Introduction

ayu88 ("we", "us", "our") operates an online sports betting and casino platform primarily serving players in Indonesia. We are committed to protecting the privacy and security of every individual who interacts with our platform, whether as a registered account holder, a visitor to our website, or a user of our customer support services.

This Privacy Policy sets out in full and transparent terms the categories of personal data we collect about you, the purposes for which that data is processed, the lawful basis on which we rely to process it, the third parties with whom we may share it, how long we retain it, the security measures we apply to protect it, and the rights you hold in relation to your personal data.

ayu88 takes a privacy-by-design approach to building and operating its platform. This means that data protection considerations are embedded into every product decision — from the payment methods we support (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, and others) to the way our customer support team handles your enquiries. We collect only the data we genuinely need, we store it only for as long as necessary, and we never use it in ways you would not reasonably expect.

If you have any questions about this Privacy Policy or about how ayu88 handles your personal data, please contact our Data Protection team at [email protected] at any time.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — i.e., information that can be used directly or indirectly to identify you, such as your full name, email address, phone number, device identifier, or IP address.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, deletion, or destruction.
• "Controller" means ayu88, the entity that determines the purposes and means of processing your personal data.
• "Processor" means a third party that processes personal data on behalf of ayu88 under a written data-processing agreement — for example, a KYC verification provider or a payment processor.
• "Player" / "User" means any registered account holder or visitor to the ayu88 platform.
• "KYC" means Know Your Customer — the identity verification process by which ayu88 confirms the identity, age, and place of residence of its Players before processing withdrawals or at ayu88's discretion at any time.
• "Cookies" means small text files placed on your device by the ayu88 platform for the purposes of session management, analytics, and user experience personalisation.
• "Sensitive Data" means a specific sub-category of personal data that carries a higher level of protection — including national identity numbers (KTP / passport numbers), financial account details, and any data revealing racial or ethnic origin, religion, or health status.

3 Data We Collect

ayu88 collects several categories of personal data in the ordinary course of operating the platform. The specific data collected depends on how you interact with us:

3.1 Registration & Account Data

• Full legal name as shown on your KTP (Kartu Tanda Penduduk) or passport.
• Date of birth (to verify that you are 21 years of age or older).
• Email address.
• Mobile phone number (Indonesian registered number preferred).
• Chosen username and hashed account password.
• City and province of residence (e.g., Jakarta, Surabaya, Bandung, Bali, Medan).

3.2 KYC & Identity Verification Data

• Government-issued identity document: KTP number, passport number, or driver's licence number.
• Scanned copy or photograph of the relevant identity document.
• Selfie photograph (used for facial-comparison verification where required).
• Proof of address documentation where requested.

3.3 Financial & Transaction Data

• Bank account details: account holder name, bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, or other Indonesian banks), and account number.
• E-wallet identifiers: registered phone number or account ID for OVO, DANA, GoPay, ShopeePay, or LinkAja.
• Deposit and withdrawal history, including amounts (in IDR / Rp), timestamps, and payment method used.
• Betting and gaming transaction records: wagers placed, game titles, stakes, outcomes, and account balance movements.

3.4 Technical & Device Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, and browser version.
• Session duration, pages visited, features interacted with, and referral source.
• Cookie identifiers and similar tracking technologies (see Section 10).

3.5 Communications Data

• Content and metadata of live chat conversations with our support team.
• Email correspondence with ayu88, including support requests and complaints.
• Records of any responsible gaming requests (deposit limits, self-exclusion, cool-off periods) submitted through your account.

4 How We Collect Your Data

ayu88 collects your personal data through the following channels:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact our support team, or participate in a promotion.
• Automatically from your device: through cookies, server logs, and analytics tools when you browse the ayu88 website or use the platform, regardless of whether you are logged in.
• From third-party KYC and identity verification partners: when we run identity checks against third-party databases to confirm the accuracy of the information you have provided.
• From payment processors: confirmation of deposit and withdrawal transaction status, including success, failure, or reversal notifications, from payment partners such as Indonesian bank switching networks and e-wallet providers.
• From fraud and anti-money-laundering screening tools: risk-scoring data generated by automated compliance systems that cross-reference your registration information against watchlists and adverse-media databases.

5 Legal Basis for Processing

ayu88 processes your personal data only where a valid legal basis exists. The primary legal bases we rely on are:

6 How We Use Your Data

ayu88 uses the personal data we collect for the following specific purposes:

• Account administration: creating, maintaining, and securing your ayu88 account, including verifying your identity and age (21+ requirement) and enabling you to log in securely.
• Transaction processing: facilitating deposits via Indonesian banks and e-wallets, processing withdrawals, and maintaining an accurate record of all financial activity on your account denominated in Indonesian Rupiah (IDR / Rp).
• KYC compliance: verifying that you are who you say you are, that you are at least 21 years of age, and that you are not subject to any exclusion order or self-exclusion request.
• Fraud prevention and platform security: detecting, investigating, and preventing fraudulent transactions, bonus abuse, money laundering, and other prohibited conduct as described in our Terms and Conditions.
• Customer support: responding to your enquiries, resolving disputes, and providing assistance in English and Bahasa Indonesia through our 24/7 live chat and email channels.
• Responsible gaming: monitoring your betting patterns for signs of problem gambling, enforcing deposit limits and session timers you have set on your account, and responding promptly to self-exclusion requests.
• Personalisation: tailoring the content, promotions, and game recommendations you see on the platform based on your in-platform behaviour and stated preferences — only where you have not opted out.
• Legal and regulatory compliance: meeting our obligations under applicable anti-money-laundering, counter-terrorism financing, and data-protection laws, and responding to lawful requests from competent authorities.
• Platform improvement: using aggregated, anonymised analytics data to understand how Players use the platform and to develop new features, fix bugs, and improve overall performance.
• Marketing (opt-in only): sending you promotional emails, bonus alerts, and game announcements if you have explicitly opted in to receive marketing communications from ayu88. You may unsubscribe from marketing emails at any time.

7 Sharing Your Data

ayu88 does not sell your personal data. We share your data only in the limited circumstances described below, and only with parties who are contractually bound to handle it securely and in accordance with applicable data protection law:

• Payment processors and banking partners: We share your name, bank account details, and transaction amounts with the relevant payment provider (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja) solely to execute the deposit or withdrawal you have requested.
• KYC and identity verification providers: We share your identity document details and verification photographs with our contracted KYC partners to confirm your identity, age, and place of residence.
• Game studio providers: When you play a game powered by a third-party studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, or Spribe), your account identifier and game-session data are shared with that studio solely for the purpose of running the game. Third-party studios are prohibited from using your data for their own marketing purposes.
• Fraud and compliance screening services: We share limited data (such as name, date of birth, and document numbers) with anti-fraud and AML screening providers to detect and prevent financial crime.
• Legal and regulatory authorities: We may disclose your personal data to law enforcement agencies, courts, regulators, or other competent public authorities where required to do so by applicable law or by a valid legal order. ayu88 will notify you of any such disclosure unless prohibited from doing so by law.
• Business successors: In the event of a merger, acquisition, or sale of all or substantially all of ayu88's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

8 Data Retention

ayu88 retains your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by applicable law. The following retention periods apply:

After the applicable retention period expires, ayu88 will securely delete or anonymise your personal data so that it can no longer be linked to you. Where anonymisation is used, the resulting aggregated data may be retained indefinitely for statistical and research purposes.

9 Data Security

ayu88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and ayu88 servers. Every page of the ayu88 platform is served over HTTPS.
• Password hashing: Account passwords are stored using a strong, salted cryptographic hashing algorithm. ayu88 employees cannot view your password in plain text under any circumstances.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. ayu88 employees who can access Player data are subject to confidentiality obligations and regular security training.
• Intrusion detection and monitoring: ayu88's infrastructure is monitored 24/7 for suspicious activity. Automated alerts and manual review processes are in place to detect and respond to potential security incidents.
• Regular security audits: ayu88 commissions regular independent security audits and penetration tests of its platform infrastructure and codebase.
• Data breach response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ayu88 will notify affected Players by email as promptly as practicable and will take immediate steps to contain and mitigate the breach.

10 Cookies & Tracking Technologies

ayu88 uses cookies and similar technologies (such as web beacons and local storage) to operate and improve the platform. The following cookie categories are in use:

You may manage your cookie preferences through your browser settings. Disabling optional cookies will not prevent you from using the ayu88 platform, but some personalisation features may not function as intended. Note that disabling strictly necessary or security cookies may affect your ability to log in or place bets.

11 Your Data Rights

As a Player on the ayu88 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with your registered email address and a clear description of your request. ayu88 will acknowledge your request within 72 hours and respond substantively within 30 days:

• Right of Access: You have the right to request a copy of all personal data ayu88 holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data ayu88 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain data fields (e.g., email address, phone number), you can update your information directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that ayu88 delete your personal data. Note that we may be unable to comply in full where retention is required by law (e.g., AML record-keeping obligations) or where your data is necessary to resolve an outstanding dispute.
• Right to Restrict Processing: You may request that ayu88 pause the processing of your personal data in certain circumstances — for example, while you dispute the accuracy of data we hold.
• Right to Data Portability: You may request a copy of the personal data you provided to ayu88 in a structured, machine-readable format (CSV or JSON) so that you can transfer it to another service provider.
• Right to Object: You have the right to object to processing of your personal data that is based on legitimate interests, including direct marketing. If you object to marketing, ayu88 will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

12 Minors

The ayu88 platform is strictly intended for adults who are 21 years of age or older. ayu88 does not knowingly collect personal data from individuals under the age of 21. If we discover that an account has been registered by a person under 21, we will immediately suspend the account, void any associated transactions, and securely delete all personal data associated with that account.

If you are a parent or guardian and believe that a minor in your care has created an ayu88 account without your knowledge, please contact us immediately at [email protected]. We will investigate and take appropriate action as a priority.

13 International Data Transfers

ayu88's primary servers and data infrastructure are located in secure, internationally recognised data centre facilities. In the course of operating the platform, your personal data may be processed by our third-party partners — including game studios, KYC providers, and payment processors — whose infrastructure may be located outside Indonesia.

Where personal data is transferred outside Indonesia, ayu88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. These safeguards include contractual data-processing agreements with our third-party partners that impose binding data-protection obligations consistent with internationally recognised standards.

ayu88 will not transfer your personal data to any country or territory that does not provide an adequate level of data protection without first implementing appropriate additional safeguards and, where required, obtaining your explicit consent.

14 Amendments to This Policy

ayu88 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. When we make material changes to this Policy, we will notify registered Players by email and by displaying a prominent notice on the ayu88 platform for a minimum of 7 days before the changes take effect.

The "Last updated" date displayed at the top of this page identifies the version of the Policy currently in force. We encourage you to review this Privacy Policy periodically. Your continued use of the ayu88 platform after the effective date of any revision constitutes your acknowledgement of the updated Policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ayu88 handles your personal data, please reach out to us through one of the following channels:

• Email: [email protected] (plain text — not a clickable link; please copy the address manually into your email client)
• Live Chat: Available 24/7 within your ayu88 account dashboard. Our Indonesian-speaking support agents are on hand across all Indonesian time zones — WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9).
• Response times: Email enquiries are acknowledged within 24 hours and resolved substantively within 30 days. Live chat messages are typically answered within 2 minutes during standard operating conditions.

When contacting us regarding a data rights request, please include your registered email address, your ayu88 account username, and a clear description of your request. Do not include your account password in any communication with our support team.