Privacy Policy

1. Definitions

Throughout this Privacy Policy the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or could reasonably identify a natural person, including name, date of birth, email address, phone number, IP address, payment details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, or deletion.
• "Controller" — ayu89, the entity that determines the purposes and means of processing Personal Data collected through this platform.
• "Player" / "You" — any individual who visits, registers on, or transacts through the ayu89 website.
• "Third Parties" — companies or individuals other than ayu89 and the Player, including payment processors, fraud-prevention providers, analytics vendors, and regulatory authorities.
• "Cookies" — small text files placed on your device by a website to store session or preference information.

2. Scope of This Policy

This Privacy Policy applies to all Personal Data collected through:

• The ayu89 website at ayu89.cam and any subdomains.
• ayu89 mobile applications (if applicable at time of download).
• Direct communications between you and our customer-support team via live chat, email, or messaging applications.
• Offline interactions related to account verification or dispute resolution.

This policy does not apply to third-party websites linked from our platform (none currently exist), or to employment-related data processed in connection with staffing activities.

3. Information We Collect

3.1 Information You Provide Directly

When you register an account or interact with ayu89 services, you voluntarily provide:

• Identity information: full legal name, date of birth, gender, and nationality.
• Contact information: email address, phone number, and residential address (including city — for example, Jakarta, Surabaya, Medan, Bandung, or Bali).
• Account credentials: username and hashed password.
• Financial information: bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and cryptocurrency wallet addresses (Bitcoin, USDT, Ethereum).
• Identity documents: government-issued ID (KTP, passport, SIM), utility bills or bank statements for proof of address, and selfies required for KYC verification.
• Support communications: messages, attachments, and transaction references shared when you contact our support team.

3.2 Information Collected Automatically

When you access ayu89, our systems automatically record:

• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone.
• Usage data: pages visited, games played, bets placed, session duration, click-stream data, and navigation paths.
• Transaction data: deposit and withdrawal amounts, timestamps, payment method used, and transaction reference numbers.
• Location data: approximate geographic location derived from IP address (city and country level only — we do not collect precise GPS coordinates).
• Cookie data: session tokens, fraud-prevention signals, and anonymous analytics identifiers.

3.3 Information from Third Parties

We may receive limited information about you from:

• Payment processors (e.g., transaction status, fraud-risk scores from BCA, BRI, OVO).
• Identity-verification service providers during KYC checks.
• Fraud-intelligence networks that flag suspicious account patterns across the industry.

4. How We Use Your Personal Data

ayu89 processes Personal Data for the following purposes, each resting on a specific legal basis:

Purpose	Data Categories Used	Legal Basis
Account registration and management	Identity, contact, credentials	Contractual necessity
Identity verification (KYC / AML)	Identity documents, financial info	Legal obligation
Payment processing (deposits & withdrawals)	Financial info, transaction data	Contractual necessity
Fraud detection and security	Technical data, usage data, IP	Legitimate interest
Responsible gaming monitoring	Usage data, transaction data	Legal obligation / legitimate interest
Customer support	All categories as relevant	Contractual necessity
Platform analytics and improvement	Anonymous usage data, cookies	Legitimate interest
Promotional communications (opt-in only)	Email address, preferences	Consent
Regulatory reporting and legal compliance	Identity, financial, transaction data	Legal obligation

5. Sharing Your Personal Data

ayu89 does not sell, rent, or trade your Personal Data. We share it only in the following limited circumstances:

5.1 Payment and Financial Service Providers

When you deposit or withdraw funds, we share necessary financial data with the relevant payment provider (Indonesian banks such as BCA, BRI, BNI, Mandiri; e-wallets such as OVO, DANA, GoPay; or cryptocurrency network processors). These providers act as independent data controllers for their own processing activities and are bound by their own privacy policies and applicable financial regulations.

5.2 Identity Verification Partners

KYC checks require us to share identity documents and facial-comparison data with licensed identity-verification service providers. These partners process data solely for the verification task and are contractually prohibited from using it for any other purpose.

5.3 Fraud Prevention and Security

We participate in industry fraud-intelligence networks and may share anonymized or pseudonymized risk signals (IP addresses, device fingerprints, behavioral patterns) with partner platforms solely to prevent fraud, money laundering, and underage gambling.

5.4 Regulatory and Legal Authorities

We may disclose Personal Data to government agencies, law enforcement, or courts when required by applicable law, a valid legal order, or a regulatory directive. We will notify you of such disclosures to the extent permitted by law.

5.5 Corporate Transactions

In the event of a merger, acquisition, or sale of substantially all our assets, player data may be transferred to the successor entity, provided that entity agrees to honor this Privacy Policy or provides equivalent protections. We will notify affected players of any such transition.

6. Cookies and Tracking Technologies

ayu89 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for login sessions, security tokens, and platform functionality. These cannot be disabled without breaking core site features.
• Analytics Cookies: Anonymous, aggregated data on page performance and user flows, used to improve platform experience. No personally identifiable information is retained.
• Fraud-Prevention Cookies: Device-fingerprinting tokens that help detect multi-account abuse, bot activity, and suspicious login patterns.

We do not use advertising, retargeting, or social-media tracking cookies. You can manage cookies through your browser settings; however, disabling strictly necessary cookies will affect your ability to log in and use the platform.

7. Data Retention

We retain Personal Data for as long as necessary to fulfill the purposes described in this policy and to comply with legal obligations:

• Active accounts: Data is retained for the lifetime of your account plus a minimum of 5 years after account closure, to satisfy AML record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years after the end of the business relationship, per international AML standards.
• Transaction records: Retained for a minimum of 7 years to comply with financial record-keeping obligations.
• Support communications: Retained for 3 years following resolution of the relevant matter.
• Marketing data (opted-in): Retained until you withdraw consent, then deleted within 30 days of the opt-out request.

After retention periods expire, data is securely deleted or anonymized so that it can no longer be linked to any individual.

8. Data Security

ayu89 implements technical and organizational security measures proportionate to the sensitivity of the data we hold. These include:

• 256-bit SSL/TLS encryption on all data in transit.
• AES-256 encryption for data at rest in our databases.
• Role-based access controls ensuring only authorized personnel can access specific data categories.
• Multi-factor authentication (MFA) requirements for all administrative system access.
• Quarterly penetration testing by independent cybersecurity firms.
• Real-time intrusion-detection and automated anomaly-alerting systems.
• Annual security-awareness training for all staff with access to player data.

Despite these measures, no internet transmission is 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players and relevant regulatory authorities within 72 hours of discovery.

9. Your Data Rights

Depending on your jurisdiction, you may have the following rights regarding your Personal Data held by ayu89:

• Right of Access: Request a copy of all Personal Data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data where we no longer have a legitimate basis to retain it (note: legal retention obligations may prevent full deletion).
• Right to Restriction: Request that we limit processing of your data to storage only while a dispute is pending.
• Right to Data Portability: Receive your data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: Object to processing based on legitimate interest, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting lawfulness of prior processing.

To exercise any of these rights, contact our Data Protection team at [email protected] with your account username and a description of your request. We will respond within 30 calendar days. Identity verification may be required before we process sensitive data-rights requests.

10. Minors and Age Restrictions

ayu89 services are strictly limited to individuals aged 21 years or older. We do not knowingly collect Personal Data from anyone under the age of 21. If we discover that a minor has created an account or provided personal information, we will immediately close the account, void all transactions, and delete the associated data. If you believe a minor has registered on our platform, please contact support at [email protected] immediately.

11. International Data Transfers

ayu89's servers are operated in jurisdictions that maintain appropriate data-protection standards. If your Personal Data is transferred outside of Indonesia or the jurisdiction in which ayu89 is licensed, we ensure equivalent protections are in place through contractual clauses, standard data-protection agreements, or transfers only to jurisdictions recognized as providing adequate protection.

12. Changes to This Privacy Policy

ayu89 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or service offerings. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the ayu89 homepage for at least 14 days following publication.
• Send an email notification to all registered players for changes that materially affect their rights.

Your continued use of ayu89 services after the effective date of a revised policy constitutes your acceptance of the updated terms.

13. Governing Law

This Privacy Policy is governed by the laws of the jurisdiction in which ayu89 holds its operating license. Players accessing ayu89 from Indonesia acknowledge that data processing is conducted under the framework of ayu89's licensing jurisdiction, and Indonesian players retain such data-subject rights as are enforceable under applicable cross-border privacy arrangements. Nothing in this policy limits rights that are mandatory under applicable local law.

14. Contact and Data Protection Inquiries

For privacy-related questions, data-rights requests, or to report a suspected data breach, please reach our Data Protection team through the following channels:

• Email: [email protected] (subject line: "Privacy / Data Rights")
• Live Chat: Available 24/7 via the ayu89 website
• Support Hours: 24 hours a day, 7 days a week (WIB / UTC+7)

We acknowledge all privacy inquiries within 5 business days and aim to resolve them fully within 30 calendar days. Complex requests that require extended investigation will receive an interim response explaining the reason for delay.