Introduction & Scope
ajo889 ("we", "us", "our") operates the online gaming and sports betting platform accessible at ajo889.bet. This Privacy Policy describes how ajo889 collects, processes, stores, shares, and protects personal data in connection with the use of that platform.
This Policy applies to all individuals who access or use the ajo889 platform, including registered members, prospective members who have begun but not completed registration, and visitors to the ajo889 website. It applies regardless of the device or network through which the platform is accessed.
By registering an account or using the ajo889 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not consent, you must not use the platform.
Data Controller
For the purposes of applicable data protection legislation, ajo889 is the data controller in respect of the personal data of its members and platform users. ajo889 determines the purposes and means of processing personal data collected through the platform.
Where ajo889 engages third-party service providers to process personal data on its behalf — for example, payment processors for IDR bank transfers and e-wallet transactions, or KYC verification providers — those parties act as data processors under contract with ajo889 and may not use member data for their own purposes.
For any data protection enquiry or rights request, contact ajo889 at the address set out in Section 17 of this Policy.
Personal Data We Collect
ajo889 collects and processes the following categories of personal data in connection with the operation of its platform:
| Data Category | Examples | Purpose |
|---|---|---|
| Identity data | Full legal name, date of birth, Indonesian KTP number, KTP scan or photograph | Account registration, KYC verification, age verification (21+), fraud prevention |
| Contact data | Email address, Indonesian mobile phone number | Account notifications, two-factor authentication, customer support, marketing (with consent) |
| Financial data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) | Deposit and withdrawal processing, fraud prevention, anti-money laundering compliance |
| Account data | Username, account balance history, transaction history, bonus activity, betting and gaming records | Service delivery, dispute resolution, responsible gaming monitoring, regulatory compliance |
| Technical data | IP address, device type and identifier, browser type, operating system, session timestamps | Platform security, fraud detection, abuse prevention, service performance monitoring |
| Usage data | Pages visited, games played, bet amounts, session duration, feature interactions | Product improvement, personalised experience, responsible gaming alerts |
| Communications data | Live chat transcripts, email correspondence, support ticket content | Customer service quality, dispute evidence, staff training |
ajo889 does not collect sensitive personal data — such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data — except where strictly required for identity verification purposes (for example, a photograph of your KTP document for KYC).
How We Collect Data
ajo889 collects personal data through the following means:
- Direct provision by you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey or promotion, you directly provide personal data to ajo889.
- Automated collection: When you access and use the platform, ajo889 automatically collects technical data and usage data through server logs, session tracking, and — with your consent where required — cookies and similar technologies. See Section 10 for full cookie details.
- Third-party verification providers: When you submit a KYC verification request, ajo889 may receive identity confirmation data from contracted third-party identity verification services that process your KTP details.
- Payment processors: When you conduct IDR transactions through Indonesian bank transfer or e-wallet channels, ajo889 receives transaction confirmation data from the relevant payment processor sufficient to credit or debit your account balance.
- Fraud prevention services: ajo889 may receive risk signals and fraud indicators from third-party fraud prevention services used to protect the platform and its members.
Legal Basis for Processing
ajo889 processes personal data on the following legal bases, which vary depending on the specific processing activity:
- Contractual necessity: Processing required to fulfil the contract between ajo889 and the member — including account creation, deposit and withdrawal processing, game access, customer support, and bonus management. Without this processing, ajo889 cannot deliver the platform services.
- Legal obligation: Processing required to comply with applicable law — including KYC identity verification, anti-money laundering record-keeping, fraud reporting, and age verification obligations under applicable gaming regulations.
- Legitimate interests: Processing where ajo889 has a legitimate business interest that is not overridden by member rights — including fraud prevention, platform security monitoring, abuse detection, service improvement analytics, and internal audit.
- Consent: Processing for purposes where ajo889 has requested and received your explicit consent — including sending promotional emails, SMS marketing messages, and personalising platform content based on gaming preferences. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
How We Use Your Data
ajo889 uses the personal data it collects for the following specific purposes:
6.1 Account Management
To create, verify, maintain, and — where necessary — close your ajo889 account. This includes sending account-related notifications (such as transaction confirmations, security alerts, and responsible gaming reminders) to your registered email address and mobile number.
6.2 Payment Processing
To process IDR deposits and withdrawals to and from your registered Indonesian bank accounts (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet accounts (OVO, DANA, GoPay, ShopeePay, LinkAja). Financial data is used strictly for transaction processing and anti-money laundering compliance; it is not used for marketing purposes.
6.3 Identity Verification (KYC)
To verify your identity, age (21+), and payment method ownership prior to processing your first withdrawal. KYC documentation is retained for the period required by applicable anti-money laundering regulations.
6.4 Fraud Prevention and Platform Security
To detect, investigate, and prevent fraudulent activity — including duplicate account creation, bonus abuse, identity fraud, unauthorised account access, and money laundering. Technical and usage data are analysed for anomalous patterns as part of this purpose.
6.5 Responsible Gaming
To monitor member activity for indicators of problem gambling behaviour — such as rapidly escalating deposit volumes, session duration anomalies, or repeated self-exclusion requests — and to provide proactive responsible gaming interventions where appropriate. This processing is in the legitimate interest of member welfare and is also required under responsible gaming standards applicable to ajo889's operating licence.
6.6 Customer Support
To respond to your support enquiries, resolve disputes, and maintain support interaction records for quality assurance and staff training purposes.
6.7 Marketing (Consent-Based)
With your consent, to send you promotional communications — including bonus offers, deposit match promotions, tournament announcements, and seasonal promotions relevant to Indonesian players (for example, during Ramadhan, Idul Fitri, or Indonesian Independence Day periods). You may withdraw marketing consent at any time via account settings or by contacting support.
6.8 Product Development and Analytics
To analyse aggregated, de-identified usage data to understand how members interact with the platform, identify popular games and features, optimise the user interface, and develop new products and services. Analytics performed for this purpose do not identify individual members.
Data Sharing & Disclosure
ajo889 does not sell, rent, or trade member personal data to any third party for commercial purposes. Personal data is shared only in the following circumstances:
- Payment processors: Financial data is shared with contracted payment processors to facilitate IDR deposits and withdrawals through Indonesian bank transfer and e-wallet channels. These processors act solely as data processors under contract and may not use your data for their own marketing or commercial purposes.
- KYC verification providers: Identity documents submitted for KYC verification are processed by contracted third-party identity verification services. These services confirm identity and age; they do not retain copies of your documents beyond the verification process.
- Game providers: Limited technical data (such as session tokens and stake amounts) is shared with integrated game studios — including Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, and Microgaming — to deliver game content. These providers do not receive your name, contact details, or bank information.
- Fraud prevention services: Anonymised or pseudonymised risk signals may be shared with fraud prevention networks to protect the platform and its members from fraudulent activity.
- Legal and regulatory disclosure: ajo889 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law — for example, in connection with anti-money laundering reporting obligations or in response to a lawful court order.
- Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of ajo889's business, member data may be transferred to the successor entity, subject to equivalent privacy protections. Members will be notified of any such transfer in advance where practicable.
International Data Transfers
ajo889 operates its platform for members primarily located in Indonesia (including Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, and other cities across the archipelago). Some of ajo889's contracted service providers — including game studios and technical infrastructure providers — operate servers or offices outside Indonesia.
Where personal data is transferred to a third country, ajo889 takes appropriate measures to ensure that the transfer is lawful and that your data receives a level of protection consistent with applicable data protection standards. Such measures include contractual data processing agreements incorporating internationally recognised data transfer safeguards.
By using the ajo889 platform, you acknowledge that your personal data may be processed in jurisdictions outside Indonesia in connection with the service providers described in this Policy.
Data Retention
ajo889 retains personal data for the following periods:
- Active account data: For the duration of your account relationship with ajo889.
- Post-closure account data: For a minimum of five (5) years following account closure, in line with international anti-money laundering record-keeping requirements. Transaction records and KYC documentation may be retained for longer periods where required by applicable law or ongoing regulatory proceedings.
- Support communications: For a period of three (3) years from the date of the communication, unless the communication forms part of an ongoing dispute in which case it is retained until the dispute is resolved and the appeal period has elapsed.
- Marketing consent records: For the duration of the consent and for three (3) years following withdrawal of consent, as evidence of the consent basis.
- Technical and usage data: Typically retained in identifiable form for up to twelve (12) months; thereafter aggregated or de-identified for analytics purposes without time limit.
When personal data is no longer required for its stated retention purpose, ajo889 securely deletes or anonymises it in accordance with its internal data destruction procedures.
Cookies & Tracking Technologies
ajo889 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you access the platform; they allow ajo889 to recognise your browser across sessions and provide a functional, personalised experience.
10.1 Essential Cookies
Strictly necessary for the platform to function — including session authentication, security tokens, and load-balancing cookies. These cannot be disabled without preventing access to the platform.
10.2 Functional Cookies
Remember your preferences — such as language settings, game filters, and display preferences — across sessions. Disabling functional cookies may affect platform personalisation features.
10.3 Analytics Cookies
Collect anonymised usage data — such as pages visited, game categories accessed, and session duration — to help ajo889 understand how members interact with the platform and prioritise product improvements. Analytics cookies do not identify you personally.
10.4 Managing Cookies
You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the ajo889 platform. Browser-level cookie management instructions are available from your browser's help documentation.
Data Security
ajo889 implements a layered information security programme to protect member personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:
- 256-bit SSL/TLS encryption on all data transmitted between your device and the ajo889 platform.
- Hashed and salted password storage — ajo889 never stores passwords in plain text.
- Two-factor authentication (2FA) available for all member accounts and required for internal staff access to member data systems.
- IP anomaly detection to identify and respond to unusual login patterns or access from unrecognised locations.
- Role-based access controls limiting ajo889 staff access to member data to those whose role genuinely requires it, governed by a principle of least privilege.
- Regular security assessments of platform infrastructure and third-party integrations.
While ajo889 takes all reasonable technical and organisational steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to member rights, ajo889 will notify affected members and relevant authorities in accordance with applicable data breach notification requirements.
Your Rights
Subject to applicable data protection law and ajo889's legitimate operational and legal obligations, you have the following rights in relation to your personal data:
- Right of access: You may request a copy of the personal data ajo889 holds about you. ajo889 will respond to verified access requests within a reasonable period.
- Right to rectification: If any of the personal data ajo889 holds about you is inaccurate or incomplete, you may request that it be corrected. For identity-related data, a correction request may require re-submission of KYC documentation.
- Right to erasure: In certain circumstances, you may request that ajo889 delete your personal data. This right is subject to ajo889's legal obligations to retain data — for example, transaction records required for anti-money laundering compliance cannot be deleted on request during the mandatory retention period.
- Right to restrict processing: In certain circumstances, you may request that ajo889 restrict the processing of your data — for example, while a rectification request is under review.
- Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request that your personal data be provided in a structured, commonly used, machine-readable format.
- Right to object: You may object to processing based on ajo889's legitimate interests where your particular circumstances justify an objection. You have an absolute right to object to processing for direct marketing purposes at any time.
- Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.
To exercise any of these rights, contact ajo889 support as described in Section 17. ajo889 will respond to all rights requests within a reasonable period and will not charge a fee for responding to routine requests. ajo889 may need to verify your identity before processing a rights request.
Children & Minors
The ajo889 platform is strictly restricted to individuals aged 21 years and over. ajo889 does not knowingly collect personal data from any person under the age of 21.
If ajo889 discovers or has reason to believe that a registered account belongs to a person under the age of 21, ajo889 will immediately suspend the account, void any balance held in it, and permanently delete the associated personal data except where retention is required for legal compliance purposes.
If you believe that a minor has registered an ajo889 account, please contact ajo889 support immediately so that appropriate action can be taken. 21+ only. Gamble responsibly.
Marketing Communications
ajo889 may send you promotional communications — including bonus offers, game promotions, tournament announcements, and seasonal campaigns — by email or SMS to your registered contact details, where you have provided consent to receive such communications.
You may withdraw your marketing consent at any time by:
- Updating your communication preferences in Account Settings → Notifications; or
- Clicking the unsubscribe link included in any ajo889 marketing email; or
- Contacting ajo889 support and requesting removal from marketing communications.
Withdrawal of marketing consent will not affect the delivery of transactional and account-operational communications — such as deposit confirmations, withdrawal notifications, security alerts, and KYC requests — which are sent on the basis of contractual necessity and cannot be opted out of while your account is active.
Third-Party Links
The ajo889 platform may contain links to third-party websites or services — for example, game provider information pages or payment processor help portals. ajo889 is not responsible for the privacy practices or content of any third-party website. This Privacy Policy applies solely to data collected and processed by ajo889 in connection with the ajo889 platform.
Where you follow a link to a third-party website, you should review the privacy policy of that site before providing any personal information.
Policy Amendments
ajo889 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable data protection law, platform operations, or data processing practices. Amendments will be published on this page with an updated effective date.
Where an amendment materially affects how ajo889 uses your personal data — particularly where it introduces a new processing purpose or changes the basis on which data is shared — ajo889 will provide reasonable advance notice through the platform's notification system or to your registered email address.
Your continued use of the ajo889 platform following publication of an amended Privacy Policy constitutes acceptance of the amended terms. If you do not accept an amendment, you must stop using the platform and contact support to arrange account closure.
Contact & Complaints
For all data protection enquiries, rights requests, or privacy-related complaints, please contact the ajo889 support team. Indonesian-speaking agents are available 24/7 via live chat on the platform. For written enquiries, use the email address below.
Support email: [email protected] (plain text — not a clickable link)
ajo889 commits to acknowledging all privacy-related enquiries within 48 hours and providing a substantive response within 14 calendar days. Where a complaint cannot be resolved to your satisfaction through ajo889's internal process, you may refer the matter to the data protection authority or regulatory body applicable in your jurisdiction.