Privacy Policy — ajo888

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, email address, phone number, financial account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, and deletion.
• "Data Controller" means ajo888, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of ajo888 under a written data-processing agreement.
• "Member" means any individual who has successfully registered an account on the ajo888 Platform.
• "Platform" means the ajo888 website at https://ajo888.cam and any associated mobile applications or APIs.
• "KYC" means Know Your Customer — the identity and age verification procedures required under ajo888's anti-money-laundering compliance program.
• "Cookie" means a small text file stored on your device by your browser at the instruction of the Platform, used to remember session state and preferences.

ajo888 collects the following categories of Personal Data, depending on your interaction with the Platform:

ajo888 collects Personal Data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC, making a deposit or withdrawal request, contacting our support team, or participating in a promotion.
• Automated technical collection: Data gathered automatically when you visit or interact with the Platform, including via server logs, session management systems, and analytics tools. This includes IP address, browser fingerprint, and navigational behavior.
• Third-party sources: Identity verification data returned by our licensed KYC partners (where you have authorized the check); fraud-risk signals from our payment processing partners; and publicly available information used for due-diligence purposes.
• Cookies and similar technologies: Data collected through cookies, local storage, and session tokens as described in the Cookies & Tracking clause of this policy.

ajo888 processes your Personal Data for the following purposes:

• Account management: Creating and maintaining your Member account, authenticating your identity at login, and communicating essential account updates such as security alerts and policy changes.
• Service delivery: Processing deposits and withdrawals via your chosen payment method (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja), settling bets and game results, and managing your Wallet balance.
• KYC and regulatory compliance: Verifying your identity and age (21+) to comply with anti-money-laundering obligations and to prevent access by minors or individuals in prohibited jurisdictions.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, unauthorized account access, money laundering, and other forms of financial crime or platform abuse.
• Platform improvement: Analyzing aggregated usage data to improve the performance, reliability, and user experience of the ajo888 Platform. This analysis uses pseudonymized or aggregated data wherever possible.
• Responsible Gaming compliance: Monitoring betting patterns to identify members who may be exhibiting signs of problem gambling, in order to intervene proactively and fulfill our duty-of-care obligations.
• Marketing communications: Sending you promotional offers, bonus notifications, and event announcements relevant to your activity on ajo888 — such as BRI Liga 1 match promotions, Idul Fitri bonuses, or Ramadhan special offers — where you have opted in to receive such communications. You may withdraw consent at any time.
• Customer support: Responding to your queries, resolving disputes, and maintaining records of support interactions for quality assurance and training purposes.
• Legal and regulatory obligations: Retaining transaction and identity records as required by applicable anti-money-laundering regulations and responding to lawful requests from regulatory or law enforcement authorities.

ajo888 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform our contract with you as a registered Member — including account creation, transaction processing, and bet settlement.
• Legal obligation: Processing required to comply with applicable anti-money-laundering laws, age-verification requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate interests: Processing carried out in pursuit of ajo888's legitimate business interests — including fraud prevention, platform security, and service improvement — where those interests are not overridden by your rights and interests.
• Consent: Processing for optional purposes such as marketing communications and non-essential analytics cookies, where we have obtained your explicit prior consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ajo888 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may share your data only in the following limited and necessary circumstances:

• Payment processors: Your name, bank account or e-wallet identifier, and transaction amount are shared with the relevant payment processor (e.g., the gateway facilitating your BCA or OVO transaction) solely to execute your requested transaction.
• KYC and identity verification partners: Your identity documents and personal details are shared with our licensed KYC verification partners for the sole purpose of completing the age and identity verification required under our compliance obligations.
• Game content providers: Limited technical data (session token, bet amounts, game outcomes) is exchanged with third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — as necessary to deliver their game content and settle results.
• Fraud and security vendors: Pseudonymized technical data (IP address, device fingerprint, behavioral signals) may be shared with third-party fraud detection services to protect the Platform and its members from malicious activity.
• Professional advisers: Our lawyers, auditors, and compliance consultants may access Personal Data to the extent necessary to provide their professional services, under strict confidentiality obligations.
• Regulatory and law enforcement authorities: We will disclose Personal Data to competent authorities when required to do so by applicable law, court order, or regulatory direction. Where legally permitted, we will notify you of such disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of ajo888's business, your Personal Data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and given the opportunity to request deletion prior to the transfer completing.

Some of ajo888's service providers and game content partners operate servers or personnel outside Indonesia. When we transfer your Personal Data to a country that may have different data protection standards, ajo888 takes the following safeguards to ensure your data remains adequately protected:

• Transfers to third-party processors are governed by contractual data protection clauses that impose obligations equivalent to internationally recognized data protection standards.
• Where a transfer involves a KYC or payment partner, we verify that the recipient maintains ISO 27001-equivalent or higher information security certifications.
• ajo888 does not transfer document-level KYC data (scanned IDs, selfies) to jurisdictions that lack adequate data protection frameworks without explicit safeguards in place.

By using the ajo888 Platform, you acknowledge that your Personal Data may be processed in countries outside Indonesia, subject to the protections described above.

ajo888 retains your Personal Data for the periods set out below, after which it is securely deleted or irreversibly anonymized:

Where you request deletion of your Personal Data and no legal retention obligation applies, ajo888 will complete the deletion within 30 days of your verified request and provide written confirmation.

The ajo888 Platform uses cookies and similar technologies to ensure proper functionality, maintain session security, and analyze aggregate usage patterns. The following cookie categories are in use:

• Strictly necessary cookies: Essential for core Platform functionality, including authentication session tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core features.
• Functional cookies: Remember your preferences such as language settings, display preferences, and whether you have acknowledged certain notifications. These improve your experience but are not strictly required.
• Analytics cookies: Collect pseudonymized data about how members navigate the Platform — pages visited, session duration, error pages encountered — to help us improve performance and user experience. We use privacy-respecting analytics tools that do not build individual behavioral profiles.
• Security cookies: Used to detect unusual session behavior, flag potential bot activity, and protect members from account-takeover attacks.

ajo888 does not use advertising cookies, cross-site tracking pixels, or third-party behavioral retargeting technologies. Your browsing activity on ajo888 is not shared with advertising networks.

ajo888 implements a layered security architecture to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. Our key security measures include:

• Transport encryption: All data in transit between your device and ajo888's servers is encrypted using TLS 1.2 or higher with 256-bit cipher suites. Our SSL certificate is issued by a globally trusted certificate authority.
• At-rest encryption: Sensitive data fields — including financial account numbers and identity document images — are encrypted at rest using AES-256 encryption in our database infrastructure.
• Access controls: Production systems containing Personal Data are accessible only to authorized personnel on a strict need-to-know basis. All privileged access is logged and subject to regular review.
• Penetration testing: ajo888 engages independent security specialists to conduct penetration tests on a regular basis. Critical findings are remediated on a priority basis.
• Incident response: We maintain a documented data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected members within 72 hours of becoming aware of the incident.
• Two-factor authentication (2FA): Members are strongly encouraged to enable 2FA on their accounts. ajo888 supports authenticator-app-based 2FA as an additional layer of login security.

As a member or visitor of ajo888, you have the following rights in relation to your Personal Data. To exercise any of these rights, submit a written request to our support team at the contact address in Clause 14:

• Right of access: You may request a copy of the Personal Data ajo888 holds about you, along with information about how it is processed and with whom it is shared.
• Right to rectification: You may request correction of any inaccurate or incomplete Personal Data. For data verified through the KYC process, supporting documentation may be required to process a correction.
• Right to erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to ajo888's legal retention obligations. Erasure requests cannot override mandatory regulatory retention periods.
• Right to restriction: You may request that ajo888 restrict processing of your Personal Data in certain circumstances — for example, while a correction request is being assessed.
• Right to data portability: You may request a copy of your Personal Data in a structured, machine-readable format for transfer to another service provider, where the processing was based on your consent or contractual necessity.
• Right to object: You may object at any time to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring. You may also withdraw marketing consent at any time via the unsubscribe link in any marketing email.
• Right not to be subject to automated decision-making: ajo888 may use automated systems to flag potentially suspicious activity or problem gambling indicators, but no decision with significant legal effect is made solely by automated means without human review.

ajo888 will respond to all verified data subject requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

The ajo888 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect Personal Data from any individual under the age of 21. If you are under 21, you must not register an account or use any service on the ajo888 Platform.

If ajo888 becomes aware that Personal Data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete the collected data as soon as technically feasible, and return any deposits to the original payment source. If you believe that a minor has registered an account on ajo888, please notify us immediately at the contact address in Clause 14.

ajo888 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, we will notify registered members by email and display a prominent notice on the Platform at least 7 days before the updated policy takes effect.

The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with a material change, you may request account closure in accordance with the Terms & Conditions.

We recommend bookmarking this page and reviewing it periodically. All prior versions of the Privacy Policy are archived and available upon request from our support team.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the ajo888 data protection team through the following channel:

For responsible gaming concerns or self-exclusion requests, please visit our Responsible Gaming page or include "Responsible Gaming Request" in your support message subject line.

For general platform questions not related to data privacy, please visit our FAQ page or review the Terms & Conditions.