Legal Document

ayo89 Privacy Policy

Your privacy matters to us. This Privacy Policy explains what personal data ayo89 collects from players in Indonesia, how that data is used, who it may be shared with, and what rights you have over your information. We are committed to handling your data with the same care and transparency we apply to every other aspect of the ayo89 platform.

Effective Date: 1 January 2026
Language: English
Market: Indonesia
SSL Encrypted

Summary: ayo89 collects only the personal data necessary to operate a safe, compliant, and high-quality gaming platform for players in Indonesia. We do not sell your personal data to third parties. We retain data only for as long as required by our operational and compliance obligations. You have clear rights to access, correct, and request deletion of your information.

1

Introduction

ayo89 ("we", "us", "our") is an online casino and sports betting platform operated under an international gaming licence and designed specifically for adult players in Indonesia. We are committed to protecting the privacy and personal data of every individual who interacts with the ayo89 website at https://ayo89.app (the "Platform").

This Privacy Policy applies to all personal data collected and processed in connection with your use of the ayo89 Platform, including account registration, deposits and withdrawals, gameplay activity, customer support interactions, and marketing communications. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

This Policy should be read alongside our Terms & Conditions, which govern the contractual relationship between you and ayo89. Where there is any conflict between this Policy and the Terms & Conditions on a privacy matter, this Privacy Policy prevails.

Indonesia Market Notice: ayo89 operates exclusively for players based in Indonesia. All personal data processing described in this Policy is conducted in accordance with internationally recognized data protection principles, applied with specific consideration of the Indonesian context, including references to local payment methods (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) and identity documentation (KTP).

2

Data We Collect

ayo89 collects personal data in several categories depending on your level of engagement with the Platform. The table below summarizes the key data categories and examples of specific data points within each:

Category Examples Purpose
Identity Data Full legal name, date of birth, nationality, KTP or passport number Account registration, KYC verification, age and eligibility checking
Contact Data Email address, mobile phone number, residential address Account communications, transaction notifications, support, and promotional messaging (where consented)
Financial Data Bank account number, e-wallet ID (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal records Payment processing, fraud prevention, AML compliance, withdrawal verification
Technical Data IP address, device type, operating system, browser type and version, session timestamps, approximate geolocation Platform security, fraud detection, service optimization, geographic access control
Usage Data Games played, bet amounts, win/loss history, session duration, feature interactions, pages visited Responsible gaming monitoring, personalization, product improvement, bonus eligibility assessment
KYC Documents Scanned copies or photographs of KTP, passport, SIM, proof of address, payment method screenshot Identity verification, withdrawal processing, regulatory compliance
Communications Data Live chat transcripts, support ticket content, email correspondence, survey responses Customer support, dispute resolution, quality assurance, training
Marketing Preferences Communication opt-in/opt-out status, preferred contact channel, promotion history Delivering relevant offers, managing consent, suppression list management

We do not collect sensitive personal data (such as health information, religious beliefs, or political affiliations) unless you voluntarily disclose such information in a support interaction, in which case it is handled with heightened confidentiality and used only to resolve your specific inquiry.

3

How We Collect Your Data

ayo89 collects personal data through the following channels and mechanisms:

3.1 Direct Collection

You provide data directly to ayo89 when you register an account, complete our KYC process, make a deposit or withdrawal, contact our support team, participate in a promotion, or submit any form on the Platform. This is the primary source of identity, contact, and financial data.

3.2 Automated Collection

When you access and use the ayo89 Platform, we automatically collect technical and usage data via server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, session activity, and interaction patterns. See Clause 8 for full details of our cookie practices.

3.3 Third-Party Sources

In limited circumstances, ayo89 may receive personal data about you from third-party sources, including: payment processors and Indonesian banking partners (transaction confirmation and dispute data); identity verification service providers (KYC document validation results); fraud prevention services (risk scoring and flagged account alerts); and game studio analytics partners (aggregated gameplay performance data). Data received from third parties is used strictly within the purposes described in this Policy and is not combined with your ayo89 account data for marketing profiling purposes without your consent.

4

How We Use Your Data

ayo89 uses your personal data for the following purposes. For each purpose, we have identified the legal basis that justifies the processing (see Clause 5 for detail on legal bases):

  • Account Management: Creating, maintaining, and securing your ayo89 account, including password reset and account recovery services. (Legal basis: Contract performance)
  • Payment Processing: Facilitating deposits and withdrawals via local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja). (Legal basis: Contract performance)
  • Identity Verification (KYC): Verifying your identity and age (21+) before processing withdrawals and at periodic compliance intervals, in accordance with internationally recognized AML and KYC standards. (Legal basis: Legal obligation)
  • Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, and unauthorized access. (Legal basis: Legitimate interests)
  • Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling, enforcing self-imposed limits and exclusions, and proactively reaching out to players whose behavior suggests they may benefit from support. (Legal basis: Legal obligation / Legitimate interests)
  • Customer Support: Responding to inquiries, resolving disputes, processing complaints, and maintaining records of support interactions for quality and training purposes. (Legal basis: Contract performance / Legitimate interests)
  • Promotional Communications: Sending you relevant bonus offers, game launch announcements, seasonal promotions (including around Indonesian holidays such as Idul Fitri / Lebaran, Nyepi, and Indonesian Independence Day on 17 August), and platform updates — where you have provided consent or where permitted under applicable marketing rules. (Legal basis: Consent)
  • Platform Improvement: Analyzing aggregated usage data to improve game selection, user interface design, payment flows, and overall platform performance. (Legal basis: Legitimate interests)
  • Legal Compliance: Retaining records as required by applicable international regulatory frameworks, and cooperating with lawful requests from competent authorities. (Legal basis: Legal obligation)

No Automated Decision-Making: ayo89 does not make solely automated decisions — without any human review — that produce legal or similarly significant effects on you, except for routine fraud screening and bonus eligibility checks where the output is always subject to human oversight before any material account action is taken.

6

Data Sharing

ayo89 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data in the following limited circumstances:

6.1 Service Providers

We engage carefully selected third-party service providers who process personal data on our behalf and under our instructions. These include: payment processors and Indonesian banking partners; identity verification and KYC service providers; IT infrastructure and cloud hosting providers; customer support platform vendors; fraud detection and risk management services; and email and communications delivery services. All service providers are bound by data processing agreements that restrict their use of your data to the specific purpose for which they were engaged.

6.2 Game Studio Partners

Game content on ayo89 is supplied by licensed studios including Pragmatic Play, Evolution Gaming, PG Soft, Spribe, and others. These studios may receive limited technical and gameplay data (such as session tokens and bet values) necessary to deliver their games. They do not receive your identity or payment data except where required for their own regulatory compliance.

6.3 Legal and Regulatory Disclosure

ayo89 may disclose personal data to competent authorities, regulators, law enforcement agencies, or courts where required by applicable law, a valid legal order, or where disclosure is necessary to protect the rights, property, or safety of ayo89, its players, or the public. We will notify you of any such disclosure request to the extent permitted by law.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ayo89's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the Privacy Policy of the acquiring entity will be made available to you.

Cross-Border Transfers: Some of ayo89's service providers are located outside Indonesia. Where personal data is transferred internationally, ayo89 ensures that appropriate safeguards are in place — such as contractual data protection clauses — to maintain a level of protection consistent with this Policy.

7

Data Retention

ayo89 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention guidelines apply:

Data Category Retention Period Basis
Account & Identity Data Duration of account plus 5 years after closure AML and KYC regulatory standards
Financial Transaction Records 7 years from the date of each transaction International financial record-keeping norms
KYC Documents 5 years after account closure or last transaction Regulatory compliance
Gameplay & Usage Data 3 years from last login Responsible gaming monitoring, dispute resolution
Support Communications 3 years from the date of the interaction Dispute resolution, quality assurance
Marketing Preferences Until consent is withdrawn, then promptly deleted Consent-based processing
Technical / Log Data 13 months from collection Security monitoring, fraud detection

When the applicable retention period expires, ayo89 securely deletes or anonymizes your personal data. Anonymized data (which can no longer identify you) may be retained indefinitely for statistical and analytical purposes.

8

Cookies & Tracking Technologies

ayo89 uses cookies and similar tracking technologies to operate the Platform effectively, enhance your user experience, and support security and analytics functions. The following cookie categories are used:

  • Strictly Necessary Cookies: Essential for the Platform to function — these include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without breaking core platform functionality.
  • Functional Cookies: Remember your preferences such as language settings, last-visited game categories, and notification preferences to provide a more personalized experience. These are set with your consent.
  • Analytics Cookies: Collect aggregated, anonymized data about how players navigate and use the Platform — helping ayo89 identify popular features, detect usability issues, and improve overall service quality. These are set with your consent.
  • Security Cookies: Used to detect fraudulent activity, protect against cross-site request forgery (CSRF), and maintain the integrity of authenticated sessions. These are strictly necessary and cannot be disabled.

ayo89 does not use third-party advertising cookies or behavioral profiling cookies that track your activity across external websites. All analytics data is processed in aggregate and is not linked to your individual ayo89 account identity.

Managing Cookies: You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. For all other cookie categories, you may withdraw consent at any time without affecting your account status.

9

Data Security

ayo89 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

  • Transport Encryption: All data transmitted between your device and the ayo89 Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. This is indicated by the padlock icon in your browser address bar.
  • Data Encryption at Rest: Sensitive personal data — including KYC documents, financial records, and account credentials — is encrypted at rest using AES-256 or equivalent encryption standards.
  • Access Controls: Access to personal data within ayo89's systems is restricted to authorized personnel on a strict need-to-know basis. All internal access is logged and periodically reviewed.
  • Password Security: Account passwords are stored using one-way cryptographic hashing with salting. ayo89 staff cannot view your password in plain text.
  • Fraud and Anomaly Detection: Automated systems monitor account activity in real time for unusual patterns indicative of unauthorized access, account takeover, or fraudulent transactions.
  • Regular Security Reviews: ayo89 conducts periodic security assessments of its infrastructure and data handling processes to identify and remediate vulnerabilities.

While ayo89 takes all reasonable precautions to safeguard your personal data, no online system is completely immune to security risk. You play an important role in protecting your own data by keeping your account credentials confidential and notifying ayo89 support immediately if you suspect unauthorized access to your account.

Data Breach Notification: In the event of a personal data breach that poses a risk to your rights and interests, ayo89 will notify affected players promptly via their registered email address, providing details of the nature of the breach, the data affected, and the steps ayo89 is taking in response.

10

Your Rights

As a player on the ayo89 Platform, you have the following rights with respect to your personal data. These rights may be exercised by contacting ayo89 support at [email protected]:

Right of Access

Request a copy of the personal data ayo89 holds about you, along with information about how it is processed.

Right to Rectification

Request correction of inaccurate or incomplete personal data. You may also update many details directly in your account settings.

Right to Erasure

Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.

Right to Restriction

Request that processing of your personal data be restricted in certain circumstances, such as while a data accuracy dispute is being resolved.

Right to Portability

Receive your personal data in a structured, machine-readable format where processing is based on your consent or a contract with ayo89.

Right to Object

Object to processing based on legitimate interests, including direct marketing. Marketing objections are honored immediately upon receipt.

Right to Withdraw Consent

Withdraw consent for any processing based on consent (e.g., marketing emails) at any time, without affecting the lawfulness of prior processing.

Right Against Automated Decisions

Request human review of any significant automated decision affecting your account, such as a fraud-related restriction.

ayo89 will respond to verified data rights requests within 30 days of receipt. In complex cases, the response period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it. There is no charge for exercising your data rights, unless requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

11

Minors

ayo89 is strictly an adults-only platform. You must be at least 21 years of age to register an account and use the ayo89 Services. This age requirement reflects both our internal responsible gaming standards and the broader social expectation in Indonesia that gambling is an adult activity.

ayo89 does not knowingly collect personal data from individuals under the age of 21. If we discover that personal data has been provided by a person under 21, we will immediately suspend the relevant account, delete the associated personal data (subject to any overriding legal retention obligations related to the suspected breach), and return any deposited funds where it is reasonably possible to do so.

If you are a parent or guardian and believe that a minor has registered an account on ayo89 or provided personal data to ayo89, please contact our support team immediately at [email protected]. We take underage access extremely seriously and will act on credible reports within 24 hours.

21+ Only: ayo89 enforces a strict 21+ age policy and verifies player age through our KYC process. Adults who are concerned about a young person's access to gambling platforms are encouraged to use parental control software to restrict access to gambling-related websites.

12

Third-Party Links & Integrations

The ayo89 Platform may contain references to or integrations with third-party services — such as game studio interfaces from Pragmatic Play, Evolution Gaming, PG Soft, Spribe, and others — as well as Indonesian payment infrastructure from banking and e-wallet partners. While ayo89 takes care in selecting partners who maintain high data protection standards, we are not responsible for the privacy practices of third-party services once you interact with them outside the ayo89 Platform boundary.

If you navigate away from ayo89 to a third-party website or service (for example, your banking app to complete a transfer), the privacy policy of that third party governs the handling of your data in that context. ayo89 encourages you to review the privacy policies of any external service you use in connection with your ayo89 account.

13

Changes to This Privacy Policy

ayo89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When material changes are made, ayo89 will notify registered players via email to their registered address and/or via a prominent notice on the Platform. The updated Policy will display a revised effective date at the top of this page.

Your continued use of the ayo89 Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with the changes, you may request account closure in accordance with Clause 3.4 of the Terms & Conditions. We recommend reviewing this Policy periodically to stay informed about how ayo89 protects your data.

14

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or ayo89's handling of your personal data, please contact our Data Privacy team through the following channel:

Email: [email protected] (plain text — not a clickable link)
Subject Line: "Privacy Request — [Your Account Username]"
Live Chat: Available 24/7 via the ayo89 Platform after login.
Response Time: Privacy-related requests are acknowledged within two (2) business days and substantively addressed within 30 days.

ayo89 is committed to resolving privacy concerns directly and transparently. If you feel that your data rights have not been adequately addressed after contacting us, you may seek recourse through the dispute resolution process described in the Terms & Conditions.

How ayo89 Protects Your Privacy

Beyond the legal text, here are the practical steps ayo89 takes every day to keep your personal data safe, private, and in your control.

End-to-End Encryption

Every byte of data exchanged between your device and ayo89 is protected by TLS encryption. Your account credentials, payment details, and KYC documents never travel across the internet in plain text.

Verified Identity Only

ayo89's KYC process ensures that only real, adult, verified individuals can access financial services on the platform. This protects all players from fraud, identity theft, and unauthorized account use.

Zero Data Selling

ayo89 does not sell, rent, or trade your personal data to any third party for commercial purposes — ever. Your data exists to serve your gaming experience, not to generate revenue for ayo89 beyond the platform itself.

Full Data Control

You can access, correct, restrict, port, or request deletion of your personal data at any time by contacting our support team. Data rights requests are handled within 30 days with no administrative hurdles.

Defined Retention Periods

ayo89 does not hold your data indefinitely. Each data category has a clearly defined retention period after which it is securely deleted or anonym ized. We retain only what we need, for only as long as we need it.

Consent-Based Marketing

Promotional emails and notifications are sent only with your explicit consent. You can update your communication preferences or unsubscribe at any time — and your opt-out is processed immediately with no delay.

Ready to Play on a Platform You Can Trust?

ayo89 combines world-class games and sports betting with the privacy protections and data security that Indonesian players deserve. Your information is safe — now focus on the game.

21+ Only. Gambling involves financial risk. Please play responsibly. Responsible Gaming