Privacy Policy

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to name, date of birth, email address, phone number, residential address, device identifiers, IP address, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, and deletion.
• "Data Controller" means air88, the entity that determines the purposes and means of Processing your Personal Data.
• "Data Processor" means any third-party entity that Processes Personal Data on behalf of air88 under a contractual data processing agreement.
• "KYC" means Know Your Customer — the identity and age verification process that requires Players to submit government-issued documentation before withdrawals are approved.
• "Cookie" means a small text file placed on your device by a website to store browsing preferences and session state information.
• "Platform" means the air88 website at https://air88.vu, including all games, services, and tools accessible thereon.

air88 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, air88 is responsible for determining the purposes and methods by which your Personal Data is processed, and for ensuring that such processing is conducted lawfully, fairly, and transparently.

All data protection inquiries, subject access requests, and requests to exercise your data rights should be directed to our support team at [email protected]. We aim to acknowledge all data-related requests within five (5) business days and to resolve them within thirty (30) calendar days of receipt.

air88 collects Personal Data through three primary channels: information you provide directly, information generated automatically through your use of the Platform, and information obtained from trusted third-party sources for identity verification purposes.

3.1 Data You Provide Directly

3.2 Data Collected Automatically

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device language settings.
• Usage Data: Pages visited, games played, bet amounts and outcomes, session duration, login timestamps, and navigation paths within the Platform.
• Location Data: Approximate geolocation derived from your IP address, used to apply regional access controls and to detect anomalous login patterns.
• Cookie & Tracking Data: Session cookies, preference cookies, and analytics identifiers — see Section 7 for full details.

3.3 Data from Third Parties

In connection with KYC compliance and fraud prevention, air88 may receive identity verification results, sanctions screening outcomes, and politically exposed person (PEP) status checks from accredited third-party identity verification providers. This data is used solely for account verification and regulatory compliance purposes.

air88 uses your Personal Data only for the specific purposes listed below. We do not use your data for any purpose that is incompatible with the reason for which it was collected without first obtaining your explicit consent.

• Account Management: Creating and maintaining your account, verifying your identity and age (21+), enabling secure login, and processing account closure requests.
• Transaction Processing: Facilitating IDR deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, and other supported payment methods; detecting and preventing fraudulent transactions.
• Service Delivery: Enabling access to casino games, live dealer tables, sportsbook markets for BRI Liga 1, EPL, Champions League, and Timnas Indonesia fixtures, as well as specialty games including togel (Indonesia's traditional numbers lottery).
• Legal & Regulatory Compliance: Meeting KYC, anti-money laundering (AML), and responsible gaming obligations; responding to lawful requests from competent authorities.
• Security & Fraud Prevention: Monitoring for unauthorized account access, duplicate account detection, bonus abuse identification, and protection of Platform integrity.
• Customer Support: Responding to your inquiries, resolving disputes, and providing 24/7 Indonesian-speaking agent assistance.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve game selection, interface design, and overall player experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and seasonal campaign updates to Players who have opted in to marketing communications. You may opt out at any time via your account settings or by contacting support.
• Responsible Gaming: Monitoring wagering patterns to identify indicators of problem gambling behavior and delivering timely responsible gaming interventions where appropriate.

air88 processes your Personal Data on the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between air88 and you (the Player) — including account creation, identity verification, transaction processing, and game access.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC verification, AML checks, and responsible gaming obligations.
• Legitimate Interests: Processing carried out in the legitimate interests of air88, including fraud detection, platform security, and service improvement, provided those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

air88 does not sell, rent, or trade your Personal Data. We share data with third parties only in the following limited, controlled circumstances:

• Payment Processors: Indonesian bank partners and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) receive the financial data necessary to process your deposit and withdrawal transactions. Each processor is subject to its own regulatory obligations and data protection standards.
• Game Studios: Licensed game providers — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may receive session and bet data necessary to deliver their games. These studios operate under data processing agreements with air88.
• Identity Verification Providers: Accredited KYC and AML service providers receive identity documents and verification data solely for the purpose of completing regulatory compliance checks.
• Analytics Providers: Anonymized, aggregated usage data may be shared with analytics platforms to support Platform performance analysis. No individually identifiable data is shared for analytics purposes.
• Legal Authorities: air88 may disclose Personal Data to law enforcement, regulatory bodies, or courts when required to do so by law, court order, or other binding legal process.

air88 uses cookies and similar tracking technologies to operate the Platform efficiently, remember your preferences, and analyze how Players interact with the site. The following categories of cookies are in use:

You may manage cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. air88 does not use third-party advertising or retargeting cookies.

air88 implements a layered set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, disclosure, alteration, or destruction:

• Encryption in Transit: All data exchanged between your device and air88 servers is encrypted using 256-bit TLS (Transport Layer Security).
• Encryption at Rest: Sensitive data fields — including KYC document files, financial account details, and authentication credentials — are encrypted at rest using industry-standard symmetric encryption.
• Access Controls: Access to Personal Data within air88 is restricted on a strict need-to-know basis. All internal staff with data access are subject to confidentiality obligations.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts. air88 internal systems enforce multi-factor authentication for all administrative access.
• Security Monitoring: The Platform is monitored continuously for intrusion attempts, anomalous activity, and data breach indicators. A formal incident response procedure is in place.
• Penetration Testing: air88 conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.

air88 retains your Personal Data for no longer than is necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus a minimum period of five (5) years following permanent account closure, to satisfy AML record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of verification, or longer where required by applicable law.
• Transaction Records: Retained for a minimum of five (5) years to support financial audit trails and regulatory reporting obligations.
• Support Communications: Retained for up to three (3) years following the resolution of the relevant inquiry, to support dispute resolution and quality assurance.
• Analytics Data: Anonymized aggregated data may be retained indefinitely for platform improvement purposes, as it can no longer be linked to an individual.
• Marketing Preferences: Retained until you withdraw consent or close your account, whichever occurs first.

When Personal Data is no longer required, air88 will securely delete or anonymize it in accordance with our internal data disposal procedures.

As a Player on the air88 platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within thirty (30) calendar days.

• Right of Access: You may request a copy of the Personal Data air88 holds about you, along with information about how it is being used.
• Right to Rectification: You may request that inaccurate or incomplete Personal Data be corrected or updated without undue delay.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations (such as AML record-keeping requirements).
• Right to Restriction: You may request that air88 restrict Processing of your Personal Data in defined circumstances, such as where you contest the accuracy of the data or where Processing is unlawful.
• Right to Data Portability: You may request that Personal Data you have provided to air88 be transmitted to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to Processing carried out on the basis of legitimate interests, including profiling for marketing purposes. You may also withdraw consent for marketing communications at any time via your account settings.
• Right Not to Be Subject to Automated Decisions: air88 does not make legally binding decisions about Players based solely on automated processing without human review. Where automated tools are used (e.g., for fraud detection), human oversight is applied before any account action is taken.

The air88 Platform is strictly intended for adults aged 21 and over. air88 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all registered Players prior to withdrawal approval.

If air88 becomes aware that Personal Data has been collected from a person under the age of 21 without parental or guardian consent, that data will be deleted immediately and the associated account will be permanently closed. If you believe that a minor may have registered an account, please contact us immediately at [email protected].

air88 operates with technology infrastructure and third-party service providers that may be located outside of Indonesia. In the course of delivering the Platform and processing transactions, your Personal Data may be transferred to and stored in jurisdictions outside Indonesia, including the jurisdictions in which our licensed game studio partners and KYC verification providers are based.

Where Personal Data is transferred internationally, air88 ensures that appropriate safeguards are in place to provide a level of protection equivalent to that which applies within Indonesia. These safeguards include:

• Contractual data processing agreements incorporating internationally recognized standard contractual clauses.
• Transfer to jurisdictions that are recognized as providing an adequate level of data protection by internationally accepted standards.
• Technical security measures — including end-to-end encryption — applied to data in transit and at rest during any international transfer.

air88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform services. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

Where amendments are material — meaning they significantly affect how we collect, use, or share your Personal Data — air88 will provide advance notice via the email address registered to your account and/or a prominent notification on the Platform. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how air88 protects your information. A record of previous Policy versions is available upon request by contacting [email protected].

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please reach out to the air88 data protection team through the following channel:

• Email: [email protected] — use the subject line "Privacy Inquiry" or "Data Rights Request" for fastest routing.
• Live Chat: Available 24/7 via the chat widget on the Platform, staffed by Indonesian-speaking agents who can assist with account-level data questions.
• Response Time: air88 aims to acknowledge all data-related inquiries within five (5) business days (WIB) and to fully resolve them within thirty (30) calendar days.

For responsible gaming concerns, please visit our dedicated Responsible Gaming page, which provides self-help tools and guidance for Players who feel that gambling may be affecting their well-being.