Privacy Policy — ajo98

For the purposes of this Privacy Policy, the following definitions apply:

• "ajo98", "we", "us", or "our" refers to the ajo98 platform and its operating entity.
• "Platform" refers to the ajo98 website, member portal, game interfaces, and all associated digital services accessible at ajo98.app.
• "Player", "you", or "your" refers to any individual who accesses, registers on, or uses the ajo98 Platform.
• "Personal Data" refers to any information that identifies or could reasonably be used to identify you as an individual, including your name, email address, date of birth, payment method details, and device identifiers.
• "Processing" refers to any operation performed on personal data — including collection, storage, organisation, retrieval, use, disclosure, or deletion.
• "Data Controller" refers to the entity that determines the purposes and means of processing personal data — in this case, ajo98.
• "Data Processor" refers to a third party that processes personal data on behalf of ajo98 under a contractual data processing agreement.
• "KYC" refers to Know Your Customer — the identity and age verification process required to open and maintain an ajo98 account and to process withdrawals.
• "Cookie" refers to a small text file placed on your device by the ajo98 website to support session management, security, and platform performance.

2.1  ajo98 acts as the Data Controller for all personal data collected through the Platform. As Data Controller, ajo98 determines what data is collected, the purposes for which it is processed, and the security and retention measures applied to it.

2.2  ajo98 is an internationally operated online gaming platform serving players across Indonesia. While ajo98 is not domiciled as an Indonesian legal entity, it processes the personal data of Indonesian residents and is committed to handling that data in a manner consistent with internationally recognised data protection standards.

2.3  For all privacy-related enquiries, data access requests, or complaints, the ajo98 Data Protection contact is reachable at: [email protected] — please include "Privacy Request" in the subject line of your message.

3.1  The categories of personal data ajo98 collects are set out in the table below. Collection is limited to what is necessary for the stated purpose.

3.2  ajo98 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information beyond what is strictly necessary for responsible gaming risk assessments.

4.1  ajo98 collects personal data through the following channels:

5.1  ajo98 uses the personal data it collects for the following purposes:

• Account Management: Creating, maintaining, and securing your ajo98 member account, including username and password management, session authentication, and login anomaly detection;
• Identity & Age Verification: Confirming that you meet the 21+ age requirement and that your identity matches the payment methods registered on your account;
• Payment Processing: Facilitating deposits and withdrawals via Indonesian payment channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja) in IDR;
• Responsible Gaming: Monitoring betting patterns to identify potential gambling harm, administering deposit limits, cooling-off periods, and self-exclusion requests, and contacting players where concern thresholds are triggered;
• Customer Support: Responding to enquiries, resolving disputes, processing complaints, and maintaining records of interactions for quality assurance;
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, bonus abuse, and unauthorised account access;
• Legal & Regulatory Compliance: Meeting our obligations under applicable laws including anti-money-laundering (AML) requirements, data retention mandates, and obligations to respond to lawful authority requests;
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform stability, game availability, and user experience;
• Marketing Communications: Where you have given explicit consent, sending promotional emails, bonus notifications, and platform news. You may withdraw this consent at any time — see Section 13.

6.1  ajo98 relies on the following legal bases to process your personal data:

7.1  ajo98 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive only the payment reference data necessary to process your specific transaction. They do not receive your full ajo98 account profile.
• KYC / Identity Verification Providers: Where ajo98 uses third-party identity verification services to process KYC documents, those providers act as Data Processors under contractual data processing agreements and are prohibited from using your data for any purpose other than the specific verification task.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Pocket Games Soft may receive anonymised session data (e.g., bet size, game round ID) to support RNG auditing and dispute resolution. They do not receive your personal identity data.
• Fraud Detection Services: Anonymised or pseudonymised risk signals may be shared with fraud prevention partners to identify potentially abusive or criminal account activity across the industry.
• Legal Authorities: ajo98 will disclose personal data to law enforcement, regulatory bodies, or courts where it is legally compelled to do so by a valid order or where disclosure is necessary to prevent serious criminal activity.
• Corporate Transactions: In the event of a merger, acquisition, or sale of material assets, your personal data may be transferred to the acquiring entity — subject to that entity maintaining equivalent data protection standards.

7.2  All third-party Data Processors engaged by ajo98 are required to implement appropriate technical and organisational security measures and to process personal data only for the purposes specified in their data processing agreement.

8.1  ajo98 uses cookies and similar technologies on the Platform. A breakdown of the types used is provided below:

8.2  ajo98 does not deploy third-party advertising cookies, social media tracking pixels, or behavioural retargeting technologies. Your Platform activity is not shared with advertising networks.

8.3  Most browsers allow you to manage cookie preferences, including blocking or deleting cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your ajo98 account and using the Platform's core features.

9.1  ajo98 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

• Active Account Data: Retained for the duration of your account and for five (5) years following permanent account closure, in line with standard financial record-keeping obligations;
• KYC Documents: Retained for five (5) years following account closure or the last KYC refresh, consistent with anti-money-laundering record retention requirements;
• Transaction Records: Retained for five (5) years from the date of the transaction;
• Support Communications: Retained for three (3) years from the date of the last communication, for dispute resolution and quality assurance purposes;
• Technical / Log Data: Retained for up to twelve (12) months in rolling logs, unless a specific security incident requires longer retention for investigation purposes;
• Marketing Consent Records: Retained for the duration of the consent period plus three (3) years, to demonstrate the validity of consent in the event of a complaint.

9.2  When retention periods expire, personal data is either securely deleted or anonymised such that it can no longer be linked to any individual Player.

10.1  ajo98 implements a layered approach to data security, combining technical controls with operational procedures:

• Encryption in Transit: All data exchanged between your device and ajo98 servers is protected by 256-bit SSL/TLS encryption. Connections to the Platform via HTTP are automatically redirected to HTTPS;
• Encryption at Rest: Sensitive data fields — including payment method details, KYC document files, and account credentials — are encrypted at rest using industry-standard algorithms;
• Access Controls: Access to personal data within ajo98's internal systems is restricted on a strictly need-to-know basis. Staff with access to player data undergo regular security awareness training;
• Login Anomaly Detection: Automated systems monitor login events for unusual patterns — including access from unrecognised IP addresses, multiple failed authentication attempts, and device changes — and can trigger account holds pending human review;
• Vulnerability Management: The ajo98 Platform undergoes regular security assessments. Critical vulnerabilities are patched on an expedited timeline.

10.2  Despite these measures, no system is entirely immune to security incidents. In the event of a breach affecting your personal data, ajo98 will notify you in accordance with our breach notification procedure described in the key highlights at the top of this page.

11.1  As a Player on the ajo98 Platform, you have the following rights with respect to your personal data:

11.2  To exercise any of these rights, contact the ajo98 support team at [email protected] with the subject line "Privacy Request — [Right Type]". ajo98 will respond within 30 days. Where a request is complex or numerous, we may extend this period by a further 60 days and will notify you accordingly.

11.3  ajo98 will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

12.1  The ajo98 Platform is strictly intended for adults aged 21 and over. ajo98 does not knowingly collect personal data from individuals under the age of 21.

12.2  If ajo98 discovers — through KYC verification or other means — that a Player is under the age of 21, the account will be immediately closed, all associated balances will be forfeited, and any personal data collected will be deleted as quickly as reasonably practicable, subject to any legal obligation to retain records of the underage access incident.

12.3  If you believe that a minor has accessed or registered on the ajo98 Platform, please notify us immediately at [email protected] and we will investigate and take appropriate action without delay.

13.1  ajo98 may send you promotional emails, bonus notifications, and platform news where you have given explicit consent to receive such communications during registration or at a later point through your account settings.

13.2  You can withdraw your marketing consent at any time by:

• Clicking the unsubscribe link present in every marketing email;
• Updating your communication preferences within your ajo98 member portal account settings;
• Contacting the support team at [email protected] and requesting removal from all marketing lists.

13.3  Withdrawing marketing consent will not affect your ability to use the Platform or receive transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts), which are sent regardless of marketing preferences as they are necessary to the operation of your account.

13.4  ajo98 does not share your contact details with third-party marketers and does not send unsolicited messages through channels you have not explicitly registered with ajo98 (e.g., ajo98 will not contact you via a phone number or email address that is not on your ajo98 account).

14.1  The ajo98 Platform may contain informational references to third-party services — for example, mentions of payment providers such as BCA, OVO, or DANA, or game studios such as Pragmatic Play or Evolution Gaming. These references do not constitute endorsements, and ajo98 has no control over the privacy practices of third-party websites.

14.2  This Privacy Policy applies solely to personal data processed by ajo98 in connection with your use of the Platform. ajo98 accepts no responsibility for the privacy practices of third parties. We recommend reviewing the privacy policy of any third-party service you interact with independently of ajo98.

15.1  ajo98 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. The "Last updated" date at the top of this page will be revised whenever a change is made.

15.2  Where changes are material — for example, a change to the categories of data collected, the purposes for which data is used, or the third parties with whom it is shared — ajo98 will notify registered Players by email to their registered address at least 7 days before the revised policy takes effect.

15.3  Where changes are minor — such as typographical corrections, clarifications that do not alter the substance of the policy, or updates to contact details — ajo98 may implement them immediately without prior notice beyond updating this page.

15.4  Continued use of the ajo98 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any change, you must cease using the Platform and may request account closure by contacting support.

15.5  The most current version of this Privacy Policy is always available at ajo98.app/privacy-policy. ajo98 recommends that you review this page periodically, particularly before submitting new personal data through the Platform.

16.1  For any questions, concerns, or requests relating to this Privacy Policy or the personal data ajo98 holds about you, please contact us through any of the following channels:

• Email: [email protected] — include "Privacy Request" in the subject line for data rights requests
• Live Chat: Available 24 hours a day, 7 days a week through the ajo98 member portal
• WhatsApp: +62 811 0000 9898 — available 08:00–24:00 WIB

16.2  ajo98 aims to acknowledge all privacy-related enquiries within one business day and to provide a substantive response within 30 days. For complex data subject access requests, the response window may be extended by up to 60 additional days; you will be informed of any such extension and the reasons for it.

16.3  ajo98's support team includes native Indonesian-speaking agents available to assist players from Jakarta, Surabaya, Bandung, Bali, Medan, Yogyakarta, Semarang, and across the archipelago — in both English and Indonesian — for general account and privacy queries.