ayu86 Privacy Policy

1.1 This Privacy Policy ("Policy") is published by ayu86 and applies to all personal data collected through the ayu86 website at https://ayu86.app, its mobile-optimised interfaces, and any related services, communications, and interactions (collectively, the "Platform"). It describes how ayu86 collects, uses, discloses, stores, and protects your personal data when you visit the Platform or register as a member.

1.2 This Policy should be read alongside the ayu86 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated into the overall membership agreement. By accessing the Platform or registering an account, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

1.3 ayu86 is primarily designed for adult members (21+) residing in Indonesia. Where this Policy references applicable law, it does so in the context of internationally recognised data protection standards, including principles drawn from the General Data Protection Regulation (GDPR) and equivalent frameworks, applied as best-practice standards regardless of jurisdictional requirement.

2.1 For the purposes of this Policy, ayu86 acts as the data controller in respect of all personal data collected through the Platform. As data controller, ayu86 determines the purposes for which and the manner in which personal data is processed.

2.2 Where ayu86 engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification providers), those providers act as data processors and are bound by data processing agreements that restrict their use of your data to the specific purposes for which it was shared.

2.3 All queries, requests, and complaints relating to the processing of your personal data should be directed to ayu86 via the contact details set out in Clause 14 of this Policy.

3.1 ayu86 collects personal data from you in the following ways: (a) data you provide directly when registering an account, completing KYC verification, or contacting support; (b) data generated automatically through your use of the Platform; and (c) data received from trusted third parties, such as payment processors and identity verification services. The categories of data collected are set out in the table below.

3.2 ayu86 does not intentionally collect special categories of personal data — such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, or data concerning sex life or sexual orientation — unless this is strictly necessary to fulfil a specific legal obligation and you have provided explicit consent for that specific purpose.

3.3 Where you choose not to provide personal data that is marked as mandatory during the registration or KYC process, ayu86 may be unable to open or maintain your account or to process withdrawal requests.

4.1 ayu86 uses the personal data it collects for the following purposes:

• Account Creation and Management: To register your account, verify your identity, process deposits and withdrawals in Indonesian Rupiah via your chosen local bank or e-wallet, and provide ongoing account services.
• Service Delivery: To make our full range of casino, sportsbook, slots, and togel (Indonesia's traditional numbers lottery) gaming services available to you, to record game outcomes and transaction histories, and to provide customer support.
• KYC and Fraud Prevention: To verify your age (21+ requirement), confirm your identity, conduct anti-money laundering checks, detect and prevent fraudulent activity, and comply with applicable international regulatory standards.
• Responsible Gaming: To monitor your gameplay patterns and, where indicators of potentially harmful gambling behaviour are identified, to intervene in accordance with our Responsible Gaming Policy — including applying account limits or initiating contact by our support team.
• Marketing and Promotions: To send you promotional offers, bonuses, and news about new games or features — but only where you have opted in to receive such communications, or where we have a legitimate interest in doing so and you have not opted out. Seasonal promotions tied to Indonesian cultural events such as Ramadhan, Idul Fitri, and Chinese New Year (Imlek) may be communicated through these channels.
• Platform Improvement: To analyse aggregated usage data to improve the Platform's design, performance, game selection, and user experience for Indonesian members.
• Legal Compliance: To fulfil our obligations under applicable laws and regulations, to respond to lawful requests from competent authorities, and to enforce our Terms & Conditions.
• Security: To detect, investigate, and prevent security incidents, unauthorised access attempts, and platform integrity violations.

4.2 ayu86 does not use your personal data for fully automated individual decision-making that produces legal or similarly significant effects on you without human review. Where automated tools are used to flag accounts for fraud review or responsible gaming intervention, a human compliance officer reviews the flag before any material action is taken.

5.1 ayu86 processes your personal data on one or more of the following legal bases, applied as internationally recognised best-practice standards:

6.1 ayu86 does not sell, rent, or trade your personal data. We share your data only with the categories of recipients listed below, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: Indonesian bank transfer networks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the financial data required to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and fraud detection services receive identity documents and related data solely to verify your age and identity in accordance with Clause 5 of the ayu86 Terms & Conditions.
• IT and Infrastructure Providers: Cloud hosting, database management, and cybersecurity providers who process data on our behalf under strict data processing agreements.
• Customer Support Tools: Live chat platform providers who receive the content of your support interactions in order to deliver customer service on our behalf.
• Legal and Regulatory Authorities: Where ayu86 is required by a valid court order, regulatory direction, or applicable law to disclose personal data to a government authority, law enforcement body, or competent court, we will comply with such requests. Where permitted, we will notify you of such disclosure.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or substantially all of ayu86's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. We will notify you prior to such a transfer taking effect.

7.1 ayu86 uses cookies and similar tracking technologies (including local storage and session tokens) to operate and improve the Platform. The categories of cookies used are as follows:

7.2 ayu86 does not use third-party advertising cookies or cross-site tracking pixels. We do not participate in real-time bidding (RTB) advertising networks, and we do not share your browsing behaviour with social media platforms.

7.3 You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary or security cookies may prevent access to some or all Platform features. Your browser's help documentation will explain how to manage cookies for your specific browser and operating system.

8.1 ayu86 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods set out below:

• Active Account Data: Retained for the duration of your account's active status plus 5 years following permanent account closure, to comply with anti-money laundering record-keeping obligations.
• KYC Documents: Retained for 5 years from the date of submission or from the date of account closure, whichever is later.
• Transaction Records: Retained for 5 years from the date of each transaction, in line with financial record-keeping best practice.
• Support Communications: Live chat transcripts and email correspondence retained for 2 years from the date of the interaction, or for the duration of any ongoing dispute, whichever is longer.
• Marketing Preference Records: Retained for the duration of your account plus 1 year following closure, to demonstrate compliance with consent requirements.
• Anonymised Analytics Data: Aggregated, non-identifiable analytics data may be retained indefinitely for Platform improvement purposes, as it no longer constitutes personal data once anonymised.

8.2 Upon expiry of the applicable retention period, personal data is either securely deleted using industry-standard data destruction methods, or anonymised such that it can no longer be attributed to any individual.

9.1 ayu86 implements a layered approach to data security, combining technical controls, organisational procedures, and continuous monitoring. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ayu86 servers;
• AES-256 encryption for sensitive data at rest (including KYC documents and financial records);
• Multi-factor authentication options for member accounts;
• Role-based access controls ensuring that personal data is accessible only to authorised personnel with a documented need;
• Regular third-party penetration testing and vulnerability assessments;
• Real-time intrusion detection and security event monitoring (SIEM);
• Automated anomaly detection for unusual login patterns and financial activity;
• Documented incident response procedures with defined escalation paths and member notification timelines.

9.2 While ayu86 employs robust security measures, no internet-connected system can be guaranteed to be completely secure against all possible attack vectors. ayu86 will notify affected members promptly in the event of a security breach that is likely to result in a significant risk to your rights or interests.

10.1 ayu86 respects your rights over your personal data. The rights described below are applied as best-practice standards. To exercise any of these rights, contact ayu86 support via live chat or at [email protected]. We will respond within 10 business days of receiving a complete request.

11.1 The ayu86 Platform is strictly for adults aged 21 years and over. ayu86 does not knowingly collect personal data from persons under the age of 21. The registration process requires all new members to confirm that they are at least 21 years old, and KYC verification is used to confirm age where required.

11.2 If ayu86 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data, close the associated account, and return any Real Funds deposits to the source payment method. Winnings accrued on an underage account will be forfeited.

11.3 Parents and guardians who believe their child may have accessed the ayu86 Platform and provided personal data are urged to contact our support team immediately via live chat so that we can investigate and take appropriate action.

12.1 ayu86 operates internationally and may transfer personal data to servers or service providers located outside Indonesia. Where such transfers occur, ayu86 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

12.2 Safeguards used for international transfers may include: standard contractual clauses that impose data protection obligations on the recipient; transfers to recipients in jurisdictions that have been assessed as providing an adequate level of data protection; and contractual requirements for recipients to implement technical security measures equivalent to those described in Clause 9 of this Policy.

12.3 For further information about the specific safeguards in place for any particular transfer, please contact ayu86 support via the details in Clause 14.

13.1 ayu86 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or Platform functionality. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

13.2 Where changes are material — meaning they significantly affect the way we collect, use, or share your personal data, or the rights available to you — ayu86 will notify active members via a notification displayed on login prior to the change taking effect. Non-material changes (such as minor clarifications or updated contact details) may take effect without prior notice.

13.3 Your continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you may close your account in accordance with Clause 14 of the ayu86 Terms & Conditions.

14.1 If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Clause 10, or wish to submit a complaint regarding ayu86's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly within the ayu86 Platform — the fastest way to reach our support team for all account and data queries.
• Email: [email protected] (plain text — not a clickable link). Please allow up to 24 hours for email responses. For data subject requests, use the subject line "Data Privacy Request — [Your Account Username]".
• Support Hours: 24 hours a day, 7 days a week, including all Indonesian public holidays (WIB, UTC+7).

14.2 ayu86 will acknowledge receipt of all data subject requests within 3 business days and will aim to fulfil requests within 10 business days. In complex cases requiring extended investigation, we will notify you of the delay and provide a revised timeline.

14.3 If you are not satisfied with ayu86's response to your data privacy complaint, you have the right to escalate the matter to the relevant data protection authority or dispute resolution body applicable under ayu86's international gaming licence. Details of the applicable authority are available upon request from our support team.