Privacy Policy

ayu189 ("we", "us", "our") operates the online betting platform accessible at https://ayu189.com and all associated mobile-optimised versions and subdomains (collectively, the "Platform"). We are committed to protecting the privacy and security of the personal data entrusted to us by our members, applicants, and visitors — particularly those across the Indonesian archipelago who make up the core of our community.

This Privacy Policy ("Policy") is intended to give you a clear and honest account of how ayu189 collects, uses, stores, shares, and protects personal data. It applies to all individuals who visit the Platform, register a member account, engage with our customer support channels, or otherwise interact with ayu189's services.

By using the ayu189 Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact us to arrange closure of your account.

This Policy should be read in conjunction with the ayu189 Terms & Conditions, which govern the overall contractual relationship between you and ayu189.

For the purposes of this Policy, the following terms carry the meanings set out below:

ayu189 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

A. Registration & Identity Data

• Full legal name (as it appears on your government-issued identification);
• Date of birth (used to verify that you are at least 21 years of age);
• Indonesian National Identity Card number (NIK from KTP) or passport number;
• Residential address, including city (e.g., Jakarta, Surabaya, Bandung, Bali, Medan, Yogyakarta);
• Mobile phone number and email address.

B. Financial & Transaction Data

• Bank account details (account name, account number, and bank name — e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI);
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja account numbers linked to your registered mobile);
• Deposit and withdrawal transaction history, amounts (in IDR), and timestamps;
• Bet history, game round history, and account balance movements.

C. Identity Verification (KYC) Documents

• Scanned or photographed copy of your KTP or passport;
• Proof-of-address documents (e.g., recent bank statements, utility bills);
• Bank account screenshots or e-wallet confirmation images, used to verify that the payment method belongs to you.

D. Technical & Usage Data

• IP address, device type, operating system, and browser version;
• Geolocation data derived from your IP address (country and region level only — we do not collect precise GPS coordinates);
• Session logs, pages visited, game sessions initiated, and clickstream data;
• Login timestamps, session duration, and device fingerprint data.

E. Communications Data

• Records of live chat transcripts, email correspondence, and WhatsApp messages exchanged with ayu189 customer support;
• Feedback, survey responses, and complaints submitted through the Platform or support channels.

ayu189 collects personal data through the following channels and mechanisms:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support, or participate in a promotion.
• Automatically through the Platform: When you browse the Platform, log in to your account, launch a game, or place a bet, our servers automatically record technical and usage data including your IP address, device identifiers, and session behaviour. This data is collected via server logs and first-party cookies.
• From payment processors: When you initiate a deposit or withdrawal via a bank transfer or e-wallet, the relevant payment service provider (e.g., BCA, OVO, GoPay) transmits transaction confirmation data to ayu189, including the amount, timestamp, and reference number.
• From identity verification partners: Where ayu189 uses a third-party KYC service provider to verify submitted identity documents, that provider may return verification status data (pass/fail/requires review) to ayu189.
• From fraud-prevention services: ayu189 may receive risk signals from third-party fraud-detection providers that help us identify suspicious account activity or potentially fraudulent transactions.

ayu189 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

ayu189 uses the personal data it collects for the following specific purposes:

• Account management: Creating and maintaining your member account, authenticating your identity at login, and enforcing the one-account-per-member rule.
• Service delivery: Processing your deposits and withdrawals in IDR via local banks and e-wallets, settling winning bets, crediting bonuses, and maintaining your transaction history.
• Identity verification: Conducting KYC checks to confirm your age (21+), identity, and that your payment methods belong to you personally, in accordance with our anti-money-laundering and compliance obligations.
• Fraud prevention and security: Detecting and investigating suspicious transactions, identifying duplicate accounts, preventing bonus abuse, and protecting the integrity of the Platform for all members.
• Responsible gaming: Monitoring account activity to identify patterns that may indicate problem gambling behaviour, facilitating self-exclusion requests, and enforcing cooling-off periods and deposit limits set by members.
• Customer support: Responding to your enquiries, complaints, and withdrawal queries via live chat, email, and WhatsApp; maintaining support records for quality assurance and dispute resolution.
• Marketing communications (with consent): Sending you information about new promotions, welcome bonuses, seasonal offers, and platform updates. You can opt out at any time.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how members interact with the Platform and improve the user experience, game selection, and performance.
• Legal compliance: Retaining records as required by applicable laws, responding to lawful requests from regulatory or law enforcement authorities, and enforcing our Terms & Conditions.

ayu189 does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose:

• Payment processors and banking partners: To facilitate deposits and withdrawals, we share the minimum necessary transaction data with banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja). These providers process your data under their own privacy policies and are bound by contractual data-protection obligations.
• KYC and identity verification providers: Where a third-party service is used to verify identity documents, we share the submitted KYC materials with that provider solely for the purpose of verification. Results are returned to ayu189; documents are not retained by the provider beyond what their own legal obligations require.
• Fraud prevention and risk management services: We may share account and transaction data with third-party fraud-detection providers to protect the integrity of the Platform. This data is shared in pseudonymised or aggregated form wherever possible.
• Game and software providers: Game studios such as Pragmatic Play, Evolution Gaming, Microgaming, Spribe, and Pocket Games Soft operate certain game environments. Technical session data (e.g., game round ID, bet amount, outcome) is transmitted to and from these providers in real time to deliver the gaming experience. These providers do not receive your full personal profile.
• Regulatory and law enforcement authorities: ayu189 may disclose personal data where required to do so by a lawful order, court judgment, or regulatory requirement. We will notify you of any such disclosure unless we are legally prohibited from doing so.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or substantially all of ayu189's assets, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify affected members of any such transfer and the privacy choices available to them.

ayu189 uses cookies and similar tracking technologies on the Platform. The following types of cookies are employed:

ayu189 does not use third-party advertising cookies or cross-site tracking pixels. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from logging in to and using the Platform.

ayu189 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and in compliance with our legal retention obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is not technically feasible within the stated period, data is placed in a restricted archive accessible only to authorised compliance personnel.

ayu189 takes the security of your personal data seriously and implements a layered approach to data protection that covers technical, organisational, and procedural controls:

• Encryption in transit: All data transmitted between your device and ayu189's servers is encrypted using TLS 1.2 or TLS 1.3, enforced via HTTPS on all Platform endpoints.
• Encryption at rest: Sensitive personal data — including KYC documents, bank account details, and identity numbers — is encrypted at rest using AES-256 encryption within our database infrastructure.
• Access controls: Access to personal data is restricted to ayu189 personnel who have a legitimate operational need. Role-based access controls and multi-factor authentication are enforced for all staff accounts with access to member data systems.
• Penetration testing: ayu189's Platform and underlying infrastructure undergo regular third-party penetration testing to identify and remediate security vulnerabilities before they can be exploited.
• Incident response: ayu189 maintains a documented data breach response plan. In the event of a data breach that poses a risk to your rights, we will notify affected members as promptly as possible and take immediate containment measures.
• Staff training: All ayu189 staff who handle personal data receive regular privacy and data-security training, and are bound by confidentiality obligations as a condition of their employment or engagement.

As a data subject, you have the following rights in relation to the personal data that ayu189 holds about you. These rights may be exercised at any time by contacting our Data Protection Officer (DPO) using the details in Section 15.

• Right of access: You may request a copy of all personal data ayu189 holds about you. We will respond within 30 calendar days of receiving a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For account-level details (name, date of birth), corrections require re-submission of supporting KYC documents.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. This right is subject to our legal retention obligations — for example, we cannot delete KYC and transaction records that we are required to retain for five years. Where erasure is not possible, we will explain the reason in writing.
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a complaint about the accuracy of your data is being investigated.
• Right to data portability: You may request a structured, machine-readable export of the personal data you have provided to ayu189, to the extent technically feasible.
• Right to object: You may object to processing carried out on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ayu189's Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under 21 years of age. Our registration process includes a date-of-birth declaration, and KYC verification is used to confirm the age of members.

If ayu189 discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21, we will:

• Immediately suspend the relevant account;
• Delete or anonymise all personal data associated with that account as soon as practicably possible, subject only to any legal retention obligations;
• Reverse any deposits made by the minor and return funds to the originating payment method, subject to verification.

If you are a parent or guardian and believe that your child has registered on the ayu189 Platform without your consent, please contact us immediately at [email protected]. We will act on your report promptly.

ayu189 is an internationally operated platform. As a result, personal data collected from members in Indonesia may be transferred to and processed in countries outside Indonesia, including the jurisdiction in which ayu189's primary infrastructure and licensing authority are located.

Where such transfers occur, ayu189 ensures that appropriate safeguards are in place, which may include:

• Contractual data transfer agreements between ayu189 and receiving parties that incorporate standard data protection clauses;
• Transfers to jurisdictions that maintain data-protection standards equivalent to or exceeding those applicable to ayu189's operations;
• Technical measures such as encryption to protect data in transit across jurisdictions.

By using the ayu189 Platform, you acknowledge and consent to the transfer of your personal data across international borders in accordance with the safeguards described above.

ayu189 reserves the right to update or revise this Privacy Policy at any time. When we make material changes, we will notify members through one or more of the following channels: a prominent notice on the Platform homepage, an in-account notification, or an email to your registered address. The effective date at the top of this Policy will be updated to reflect the date of the latest revision.

Your continued use of the ayu189 Platform following the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you may close your account and request erasure of your data by contacting our support team.

We encourage you to review this Policy periodically to stay informed about how ayu189 protects your personal data. For your convenience, the version number and effective date are displayed prominently in the page header above.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact ayu189's Data Protection Officer (DPO) through any of the following channels:

• Email: [email protected] — for formal privacy rights requests, data erasure requests, and complaints. Please use the subject line "Privacy Rights Request" for faster routing.
• Live Chat: Available 24/7 on the ayu189 Platform — for general privacy enquiries, opting out of marketing, or confirming your consent preferences.
• WhatsApp: +62 811 9189 189 — for real-time support in Indonesian or English. Note that for formal privacy rights requests, a written email is preferred to ensure a proper audit trail.

ayu189 will acknowledge all privacy rights requests within 5 business days (WIB, UTC+7) and will endeavour to resolve them within 30 calendar days. Complex requests may require additional time, in which case we will inform you of the extended timeline and the reason for it.