Privacy Policy

1. Introduction

ara288 operates an online betting platform serving Indonesian players with sports betting, live casino games, slot entertainment, and specialty games including togel (Indonesia's traditional lottery), sabung ayam (cockfighting), and comprehensive football betting markets. We recognize that privacy is fundamental to maintaining trust with our community of over 2 million members across Indonesia.

This Privacy Policy applies to all personal data collected through the ara288 website, mobile applications, customer support channels, and any other touchpoint where you interact with our services. It describes what information we collect, why we collect it, how we use it, who we share it with, and what rights you have regarding your personal data.

We comply with applicable Indonesian data protection regulations and international best practices for data privacy and security. Our commitment extends beyond legal compliance to encompass ethical data handling that respects your dignity, autonomy, and right to privacy.

2. Information We Collect

2.1 Information You Provide to Us

When you register for an ara288 account, we collect the following personal information:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued ID number (KTP), and identity verification documents including photographs of your ID card and proof of address.
• Contact Information: Email address, phone number, residential address including street, city, province, and postal code.
• Account Credentials: Username, password (stored in encrypted form only), and security questions/answers.
• Financial Information: Bank account details including bank name (BCA, BRI, BNI, Mandiri, etc.), account number, account holder name, and payment transaction history. E-wallet information for OVO, DANA, GoPay accounts.
• Communication Data: Messages sent through customer support channels including live chat, email, WhatsApp, and in-app messaging, along with any attachments or supporting documents you provide.

2.2 Information Collected Automatically

When you use ara288 services, we automatically collect technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), and mobile network information.
• Usage Data: Pages visited, features used, games played, betting history, deposit and withdrawal transactions, login timestamps, session duration, and clickstream data.
• Location Data: IP address, geographic location derived from IP address, and timezone (WIB, WITA, or WIT).
• Technical Data: Cookies, web beacons, browser cookies, local storage data, and similar tracking technologies that help us understand how you interact with our platform.

2.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Identity Verification Services: Data from identity verification providers who confirm your identity, age, and address on our behalf.
• Payment Processors: Transaction confirmation and payment method verification from banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay).
• Fraud Prevention Services: Information from fraud detection and prevention partners who help us identify suspicious activity.
• Marketing Partners: Attribution data from advertising partners if you arrived at ara288 through a marketing campaign.

3. How We Use Your Information

ara288 uses your personal information for the following purposes:

3.1 Service Provision

• Creating and managing your ara288 account
• Processing deposits and withdrawals to your bank account or e-wallet
• Facilitating gameplay, bet placement, and bet settlement
• Providing customer support and responding to your inquiries
• Delivering notifications about account activity, promotions, and platform updates

3.2 Legal and Regulatory Compliance

• Verifying your identity and age to comply with 21+ age restrictions
• Conducting Know Your Customer (KYC) and anti-money laundering (AML) checks
• Detecting and preventing fraud, abuse, and illegal activity
• Complying with legal obligations, court orders, and regulatory requests
• Maintaining records for auditing and regulatory reporting purposes

3.3 Platform Improvement

• Analyzing usage patterns to improve user experience and platform performance
• Developing new features, games, and betting markets
• Personalizing content and recommendations based on your preferences
• Conducting research and analytics to understand Indonesian player behavior

3.4 Marketing and Communications

• Sending promotional offers, bonuses, and tournament invitations tailored to your interests
• Communicating about new games, betting markets, and platform features
• Conducting surveys to gather feedback on our services
• Displaying targeted advertising on our platform (not on third-party sites)

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (providing betting services).
• Legal Obligation: Processing is required to comply with Indonesian law and international gaming regulations.
• Legitimate Interests: Processing serves our legitimate business interests such as fraud prevention, platform security, and service improvement, balanced against your privacy rights.
• Consent: Where required by law, we obtain your explicit consent before processing sensitive data or sending marketing communications.

5. Data Sharing and Disclosure

ara288 does not sell your personal information to third parties. We share your data only in the following limited circumstances:

5.1 Service Providers

We share data with trusted third-party service providers who perform services on our behalf, including:

• Payment processors (banks, e-wallet providers) for deposit and withdrawal processing
• Identity verification services for KYC compliance
• Cloud hosting providers for data storage and platform infrastructure
• Customer support software providers
• Analytics and fraud prevention tools

All service providers are contractually bound to use your data only for the specified purposes and to maintain appropriate security measures.

5.2 Legal and Regulatory Authorities

We may disclose your information to law enforcement, regulators, courts, or government authorities when legally required or when necessary to:

• Comply with legal obligations, court orders, or regulatory requests
• Enforce our Terms and Conditions
• Investigate potential violations of law or our policies
• Protect the rights, safety, and property of ara288, our users, or the public

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

6. Data Security

ara288 employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmissions between your device and our servers use SSL/TLS encryption. Sensitive data including passwords and financial information is encrypted at rest using AES-256 encryption.
• Access Controls: Personal data is accessible only to authorized personnel who require it to perform their job functions. All employees sign confidentiality agreements.
• Network Security: Our infrastructure includes firewalls, intrusion detection systems, and regular security audits to prevent unauthorized access.
• Payment Security: We comply with Payment Card Industry Data Security Standards (PCI DSS) and never store complete bank card details on our servers.
• Regular Testing: We conduct regular penetration testing and vulnerability assessments to identify and address security weaknesses.

While we implement robust security measures, no system is completely invulnerable. You play a critical role in security by using a strong password, not sharing your login credentials, and logging out when using shared devices.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

After the retention period expires, we securely delete or anonymize your personal data so it can no longer be associated with you.

8. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you, including details about how we process it.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data in certain circumstances, subject to legal retention requirements.
• Right to Restriction: Request that we limit how we use your personal data in specific situations.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format for transfer to another service.
• Right to Object: Object to processing of your data for marketing purposes or based on legitimate interests.
• Right to Withdraw Consent: Withdraw previously given consent at any time (without affecting the lawfulness of processing before withdrawal).

To exercise any of these rights, contact our Data Protection Officer at [email protected] or through our customer support channels. We will respond to your request within 30 days.

9. Cookies and Tracking Technologies

ara288 uses cookies and similar technologies to enhance your experience, analyze usage patterns, and deliver personalized content. Cookies are small text files stored on your device. We use the following types of cookies:

• Essential Cookies: Required for platform functionality, including login, account access, and transaction processing. These cannot be disabled.
• Performance Cookies: Collect anonymous usage data to help us understand how visitors use our platform and identify areas for improvement.
• Functionality Cookies: Remember your preferences such as language, timezone (WIB), and customization settings.
• Marketing Cookies: Track your activity to deliver relevant promotional content within the ara288 platform.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may limit platform functionality.

10. International Data Transfers

ara288 primarily serves Indonesian residents, and your data is stored on servers located within data centers that comply with international security standards. When we transfer data internationally (such as to cloud service providers or payment processors), we ensure appropriate safeguards are in place including standard contractual clauses and adequacy decisions under applicable law.

11. Children's Privacy

ara288 services are strictly for adults aged 21 and over. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected data from someone under 21, we will immediately delete that information and close the associated account. If you believe a minor has provided information to ara288, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. The "Last Updated" date at the top of this page indicates when the most recent changes were made. Material changes will be communicated via email or prominent platform notification. Your continued use of ara288 services after such notification constitutes acceptance of the updated Privacy Policy.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: