Privacy Policy

1. Introduction & Scope

This Privacy Policy governs the processing of personal data collected by ari303 in connection with our online betting, casino, slots, togel (Indonesia's traditional numbers lottery), and other gaming services. We operate as an international online gaming platform primarily serving Indonesian players, and we are committed to compliance with applicable data protection regulations including international standards for data security and privacy.

This Privacy Policy should be read in conjunction with our Terms & Conditions (available at /terms-conditions) and our Responsible Gaming Policy (available at /responsible-gaming). Together, these documents form the complete framework governing your relationship with ari303.

1.1 Data Controller

ari303 acts as the data controller for all personal information collected through our platform. We determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection laws and industry standards.

1.2 Scope of Application

This Privacy Policy applies to:

• Personal information collected when you register an account on ari303.
• Data generated through your use of betting, casino, and gaming services.
• Information provided when you contact customer support via live chat, email, or WhatsApp.
• Technical data collected automatically through cookies and similar tracking technologies.
• Payment and transaction data processed in connection with deposits and withdrawals.

This Privacy Policy does not apply to third-party websites or services linked from our platform. We encourage you to review the privacy policies of any external sites you visit.

2. Personal Data We Collect

ari303 collects several categories of personal information to operate our platform, provide services, comply with legal obligations, and enhance user experience. The types of data we collect include:

2.1 Registration & Account Information

When you create an account on ari303, we collect the following personal details:

• Identity information: Full legal name, date of birth, gender, nationality.
• Contact information: Email address, phone number (mobile), residential address (street, city, province, postal code).
• Account credentials: Username, password (stored in encrypted form), security questions and answers.
• Preferred language and currency: Language preference (English/Indonesian), currency selection (IDR).

2.2 Identity Verification (KYC) Documents

To comply with international anti-money laundering (AML) and Know Your Customer (KYC) regulations, we collect copies of government-issued identification documents and supporting materials:

• Government-issued ID: Indonesian KTP (Kartu Tanda Penduduk), passport, or driver's license.
• Proof of address: Utility bills (electricity, water, internet), bank statements, or government correspondence showing your current residential address.
• Proof of payment method: Bank account statements, e-wallet screenshots (OVO, DANA, GoPay), or credit/debit card images (with middle digits obscured for security).
• Selfie verification: In some cases, we may request a photograph of you holding your ID document to verify identity authenticity.

2.3 Financial & Transaction Data

We collect financial information related to deposits, withdrawals, betting activity, and account balances:

• Payment method details: Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Transaction history: Deposit amounts, withdrawal requests, transaction dates and times, payment processor reference numbers.
• Betting records: Sports bets placed, casino wagers, slot spins, togel number selections, bet amounts, odds, outcomes, winnings, and losses.
• Bonus and promotion usage: Bonuses claimed, wagering progress, bonus forfeiture events.

2.4 Technical & Usage Data

We automatically collect technical information when you access and use the ari303 platform:

• Device information: Device type (desktop, mobile, tablet), operating system (Windows, macOS, Android, iOS), browser type and version, screen resolution.
• Connection data: IP address, internet service provider (ISP), approximate geographic location (city, region), timezone.
• Usage analytics: Pages visited, features accessed, time spent on platform, navigation paths, game sessions, click patterns.
• Cookies and tracking technologies: Session cookies, persistent cookies, device identifiers, web beacons (see Section 8 for details).

2.5 Communications & Customer Support

When you contact ari303 customer support, we collect and retain records of your communications:

• Live chat transcripts, email correspondence, WhatsApp messages.
• Phone call recordings (where legally permitted and with prior notice).
• Complaint details, support ticket history, issue resolution notes.

2.6 Marketing Preferences

We collect information about your marketing and communication preferences, including consent to receive promotional emails, SMS notifications, and push notifications about bonuses, tournaments, and new game releases.

3. How We Use Your Personal Data

ari303 processes your personal data for the following legitimate business purposes:

3.1 Account Management & Service Provision

• Creating and maintaining your ari303 account.
• Authenticating your identity when you log in.
• Processing deposits and withdrawal requests.
• Managing your betting and gaming activity (sports bets, casino play, slots, togel).
• Calculating winnings, settling bets, crediting bonus funds.
• Providing access to your transaction history and betting records.
• Delivering customer support and resolving technical issues.

3.2 Legal & Regulatory Compliance

• Verifying your age (21+ requirement) and identity to prevent underage gambling.
• Conducting Know Your Customer (KYC) and anti-money laundering (AML) checks.
• Detecting and preventing fraud, collusion, bonus abuse, and prohibited activities.
• Complying with legal obligations under gaming regulations, financial crime laws, and international data protection standards.
• Responding to lawful requests from government authorities, regulators, and law enforcement agencies.
• Maintaining audit trails and records as required by licensing authorities.

3.3 Security & Fraud Prevention

• Monitoring accounts for suspicious activity, unusual betting patterns, and security breaches.
• Preventing unauthorized access, hacking attempts, and account takeovers.
• Identifying duplicate accounts and enforcing our one-account-per-person policy.
• Detecting coordinated fraud schemes, money laundering, and organized bonus abuse rings.
• Implementing risk management protocols to protect both ari303 and legitimate players.

3.4 Platform Improvement & Personalization

• Analyzing user behavior to improve website functionality, navigation, and game offerings.
• Personalizing your experience by recommending games, sports markets, and promotions based on your preferences.
• Conducting A/B testing and user experience research to optimize platform performance.
• Developing new features, payment methods, and gaming products tailored to Indonesian players.

3.5 Marketing & Promotional Communications

With your consent, we use your contact information to send promotional communications including:

• Bonus offers, free bet promotions, and cashback campaigns.
• New game launches, tournament invitations, and VIP events.
• Seasonal promotions tied to Indonesian holidays (Idul Fitri, Nyepi, Chinese New Year, Independence Day).
• Newsletters featuring betting tips, game guides, and platform updates.

You may opt out of marketing communications at any time through your account settings or by clicking the unsubscribe link in our emails. Opting out does not affect essential service communications such as transaction confirmations, account security alerts, and legal notices.

4. Data Sharing & Third-Party Disclosure

ari303 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we do share your data with trusted third-party service providers and partners in the following circumstances:

4.1 Payment Processors & Financial Institutions

We share transaction details with payment service providers (PSPs), banks, and e-wallet operators to process deposits and withdrawals. This includes sharing your bank account number, e-wallet ID, transaction amounts, and verification status with providers such as BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and ShopeePay to facilitate fund transfers.

4.2 Identity Verification & KYC Service Providers

We engage third-party KYC and identity verification specialists to authenticate government-issued documents, cross-check identity information against databases, and screen for politically exposed persons (PEPs) and individuals on sanctions lists as part of our AML compliance obligations.

4.3 Game & Software Providers

Your betting and gaming activity is shared with our licensed game suppliers including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Play'n GO, Pocket Games Soft, Habanero, Spribe, Ezugi, and Asia Gaming. These providers require limited data (username, session ID, bet amounts) to deliver live casino streams, slot games, and RNG-based gaming content.

4.4 Customer Support Tools

We use third-party customer support platforms to manage live chat, email ticketing, and communication history. Support agents employed by ari303 or our outsourced support partners may access your account details and communication records to resolve your inquiries efficiently.

4.5 Analytics & Marketing Platforms

We share anonymized or aggregated usage data with analytics tools (such as Google Analytics) to understand traffic patterns, user behavior, and platform performance. Marketing platforms may receive hashed email addresses or device identifiers for the purpose of delivering targeted advertising campaigns on social media and display networks, where you have consented to such marketing.

4.6 Legal & Regulatory Authorities

We may disclose your personal information to law enforcement agencies, regulatory bodies, courts, or government authorities when:

• Required by law, court order, subpoena, or regulatory request.
• Necessary to investigate suspected illegal activity, fraud, money laundering, or threats to public safety.
• Required to enforce our Terms & Conditions or protect the rights, property, or safety of ari303, our users, or the public.

4.7 Business Transfers

In the event that ari303 undergoes a merger, acquisition, sale of assets, or business restructuring, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify you via email or prominent platform notice before your data is transferred and becomes subject to a different privacy policy.

5. Data Security Measures

ari303 employs industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Encryption

• SSL/TLS encryption: All data transmitted between your device and ari303 servers is encrypted using 256-bit SSL (Secure Sockets Layer) or TLS (Transport Layer Security) protocols.
• Password hashing: User passwords are hashed using bcrypt or similar cryptographic algorithms and are never stored in plain text.
• Database encryption: Sensitive data fields (payment details, identification documents) are encrypted at rest within our databases.

5.2 Access Controls

• Access to personal data is restricted to authorized personnel on a need-to-know basis.
• Employees undergo background checks and sign confidentiality agreements.
• Multi-factor authentication (MFA) is enforced for administrative access to systems containing user data.
• Role-based access controls (RBAC) limit what each employee or contractor can view or modify.

5.3 Security Monitoring & Incident Response

• Continuous monitoring for suspicious login attempts, unusual betting patterns, and potential security breaches.
• Intrusion detection systems (IDS) and firewalls protect our infrastructure from external attacks.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent security firms.
• Incident response protocols to quickly detect, contain, and remediate security breaches.

5.4 User Responsibility

While ari303 implements robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and do not reuse passwords from other websites.
• Enable two-factor authentication (2FA) if available.
• Never share your login credentials with anyone, including individuals claiming to be ari303 staff.
• Log out after each session, especially on shared or public devices.
• Notify us immediately if you suspect unauthorized access to your account.

6. Data Retention Periods

ari303 retains your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements:

Data Category	Retention Period	Reason
Account Information	Duration of account + 5 years after closure	Legal, regulatory, audit requirements
KYC Documents	5 years after account closure	AML/KYC compliance, legal obligations
Transaction Records	7 years	Financial regulations, tax compliance, audit trails
Betting History	5 years	Dispute resolution, regulatory reporting
Support Communications	3 years	Customer service quality, dispute resolution
Marketing Preferences	Until consent withdrawn or account closed	Consent management
Technical Logs	12 months	Security monitoring, troubleshooting

After retention periods expire, we securely delete or anonymize your personal data in accordance with data protection best practices. Anonymized data (data that can no longer identify you personally) may be retained indefinitely for statistical analysis and research purposes.

7. Your Privacy Rights

As a user of ari303 services, you have the following privacy rights regarding your personal data:

7.1 Right of Access

You have the right to request access to the personal data we hold about you. You may view your account information, transaction history, and betting records directly through your account dashboard. For additional data not visible in your dashboard (such as KYC documents, support transcripts, or system logs), you may submit a data access request by contacting our Data Protection Officer.

7.2 Right to Rectification

If any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request correction. You can update your contact details, address, and communication preferences directly through your account settings. For changes to verified identity information (name, date of birth), you must contact customer support and provide supporting documentation.

7.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data under certain circumstances, including:

• The data is no longer necessary for the purposes for which it was collected.
• You withdraw consent (where processing was based on consent) and there is no other legal basis for processing.
• You object to processing and there are no overriding legitimate grounds for continued processing.
• The data has been unlawfully processed.

Please note that this right is not absolute. We may be required to retain certain data to comply with legal obligations (such as AML record-keeping requirements, which mandate retention of transaction records for 5-7 years) or to establish, exercise, or defend legal claims.

7.4 Right to Restrict Processing

You may request that we temporarily restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing. During the restriction period, we will store the data but not actively process it except with your consent or for legal claims.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON) and to transmit that data to another service provider. This right applies to data you provided to us with your consent or under a contract, and which we process by automated means.

7.6 Right to Object

You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis. This includes objecting to direct marketing (including profiling). We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for legal claims.

7.7 Right to Withdraw Consent

Where we process your data based on consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing conducted before withdrawal.

7.8 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected] with your request. We will respond within 30 days and may require identity verification to prevent unauthorized access to your data. There is no fee for exercising your rights unless requests are manifestly unfounded or excessive.

8. Cookies & Tracking Technologies

ari303 uses cookies and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content:

8.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. They enable the website to remember your preferences, authenticate your session, and track your interaction with the platform.

8.2 Types of Cookies We Use

• Essential Cookies: Necessary for platform functionality, including session management, login authentication, and security. These cookies cannot be disabled without breaking core features.
• Performance Cookies: Collect anonymous information about how users interact with our platform, helping us identify and fix technical issues and improve performance.
• Functional Cookies: Remember your preferences (language, timezone, game favorites) to provide a personalized experience.
• Marketing Cookies: Track your browsing behavior to deliver targeted advertising and measure campaign effectiveness. These are only set with your consent.

8.3 Managing Cookies

You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies, though doing so may impair platform functionality. To opt out of third-party advertising cookies, visit industry opt-out tools such as the Digital Advertising Alliance or Network Advertising Initiative.

9. Third-Party Services & Links

The ari303 platform may contain links to third-party websites, social media platforms, or external services (such as payment processors). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information. This Privacy Policy applies only to data collected by ari303 directly.

10. International Data Transfers

ari303 operates internationally and may transfer your personal data to servers located outside Indonesia for processing and storage. When we transfer data internationally, we implement appropriate safeguards such as:

• Standard contractual clauses approved by data protection authorities.
• Ensuring that data recipients are located in jurisdictions with adequate data protection laws.
• Binding corporate rules for intra-group transfers.

By using ari303 services, you consent to such international transfers necessary to provide our services efficiently.

11. Changes to This Privacy Policy

ari303 reserves the right to update this Privacy Policy to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated via email to your registered email address and by posting a prominent notice on our platform. The "Effective Date" at the top of this document indicates when the policy was last updated.

Your continued use of ari303 services after changes take effect constitutes acceptance of the updated Privacy Policy. We recommend reviewing this page periodically to stay informed about how we protect your data.

12. Contact Information & Data Protection Officer

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact our Data Protection Officer:

• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 through your ari303 account

We are committed to resolving privacy concerns promptly and transparently. If you are not satisfied with our response, you may have the right to lodge a complaint with a data protection supervisory authority in your jurisdiction.