Privacy Policy

1. Introduction

Welcome to the 898aa Privacy Policy. This document explains how 898aa ("we," "us," "our") collects, uses, processes, stores, and protects the personal information of users ("you," "your") who access and use our online gaming platform at https://898aa.cam (the "Website" or "Services").

At 898aa, we are committed to protecting your privacy and handling your personal data with the highest standards of security and transparency. This Privacy Policy applies to all users of our Services, including visitors, registered members, and VIP tier members accessing our casino games, sports betting, live dealer experiences, and other gaming services.

By creating an account with 898aa, accessing our Website, or using our Services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any aspect of this Privacy Policy, you must immediately cease using our Services.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of the 898aa platform. For questions regarding our data practices or to exercise your privacy rights, please contact our Data Protection team using the contact information provided at the end of this document.

2. Information We Collect

To provide our Services and comply with legal obligations, 898aa collects several categories of personal information. The specific information we collect depends on how you interact with our platform.

2.1 Information You Provide Directly

Account Registration Information: When you create an account with 898aa, we collect identification and contact information including:

• Full legal name as it appears on your Indonesian National Identity Card (KTP)
• Date of birth (to verify you are at least 21 years old)
• Residential address in Indonesia (city, province, postal code)
• Email address for account communications
• Mobile phone number for account security and notifications
• Preferred username and encrypted password
• Security questions and answers for account recovery

Identity Verification Documents (KYC): To comply with Know Your Customer (KYC) and anti-money laundering regulations, we collect and verify:

• Indonesian National Identity Card (KTP) - front and back scanned images or photographs
• Proof of address documents (utility bills, bank statements, government correspondence) dated within the last three months
• Selfie photographs holding your KTP for facial verification and liveness detection
• Additional documentation may be requested for enhanced due diligence or VIP tier verification

Financial and Payment Information: When you deposit or withdraw funds, we collect:

• Indonesian bank account details (bank name, account holder name, account number) for banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, and other supported banks
• E-wallet information for OVO, DANA, GoPay, ShopeePay, and LinkAja transactions
• Transaction history including deposit amounts, withdrawal requests, and processing timestamps
• Payment verification documents if requested for security purposes

Communication and Support Data: When you contact our customer support team, we collect:

• Support inquiry content and chat transcripts
• Email correspondence with our support team
• WhatsApp messages sent to our support channels
• Phone call recordings (with advance notice) for quality assurance and training

2.2 Information Collected Automatically

Usage and Activity Data: When you use 898aa Services, we automatically collect:

• Gaming activity including games played, bet amounts, win/loss records, and session duration
• Sports betting selections, odds accepted, and settlement outcomes
• Bonus claims, wagering progress, and promotional participation
• VIP tier progression and loyalty program activity
• Account balance transactions and wallet history

Technical and Device Information: We collect technical data including:

• IP address and geolocation data (city/province level, not precise GPS)
• Device type, model, operating system, and browser information
• Screen resolution and device language settings
• Connection type (WiFi, mobile data) and Internet Service Provider
• Referring website or source that directed you to 898aa

Cookies and Similar Technologies: 898aa uses cookies, web beacons, and similar tracking technologies to enhance user experience, maintain session security, and analyze platform performance. See Section 8 for detailed information on our cookie practices.

3. How We Use Your Information

898aa processes your personal information for the following legitimate purposes:

3.1 Service Provision and Account Management

• Account Creation and Maintenance: Creating and managing your 898aa account, authenticating your identity, and providing access to gaming services.
• Transaction Processing: Processing deposits and withdrawals through Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja) in Indonesian Rupiah.
• Game Play Facilitation: Enabling your participation in casino games, sports betting, live dealer games, togel lottery betting, sabung ayam streaming, and other gaming activities.
• Bonus and Promotion Management: Administering bonuses, promotions, VIP rewards, cashback offers, and loyalty program benefits.
• Customer Support: Responding to inquiries, resolving technical issues, and providing Indonesian-language support via live chat, email, and WhatsApp.

3.2 Legal and Regulatory Compliance

• Age Verification: Verifying that all users are at least 21 years old as required by our Terms & Conditions and responsible gaming standards.
• Identity Verification (KYC): Confirming user identity through Indonesian National ID (KTP) verification to prevent identity fraud and comply with international gaming regulations.
• Anti-Money Laundering (AML): Monitoring transactions and gaming patterns to detect and prevent money laundering, terrorism financing, and financial crimes.
• Fraud Prevention: Detecting multiple accounts, bonus abuse, collusion, payment fraud, and other prohibited activities.
• Regulatory Reporting: Complying with regulatory reporting requirements and responding to lawful requests from authorities.

3.3 Platform Security and Integrity

• Security Monitoring: Detecting unauthorized access attempts, account takeovers, and security threats.
• Fair Play Enforcement: Identifying cheating, game manipulation, betting software (bots), and terms violations.
• Technical Performance: Monitoring platform stability, identifying technical issues, and optimizing service performance.

3.4 Marketing and Communications (With Consent)

• Promotional Communications: Sending information about new games, bonus offers, VIP promotions, and platform updates via email or SMS (only if you have opted in).
• Personalized Recommendations: Suggesting games, betting markets, and promotions based on your preferences and activity history.
• Responsible Gaming Communications: Sending responsible gaming reminders, deposit limit notifications, and self-exclusion information.

You may opt out of marketing communications at any time by adjusting your account preferences or clicking unsubscribe links in emails. Transactional communications (deposit confirmations, withdrawal notifications, account security alerts) cannot be opted out as they are essential for account operation.

4. Data Sharing and Disclosure

898aa does not sell your personal information to third parties. We share your data only in the following limited circumstances:

4.1 Service Providers and Business Partners

We share information with trusted third-party service providers who assist in delivering our Services:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) for transaction processing.
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft, Spribe, and other licensed game developers who provide casino games and live dealer experiences.
• Identity Verification Services: Third-party KYC/AML verification providers who validate Indonesian National ID (KTP) authenticity and facial recognition matching.
• Cloud Storage Providers: Secure cloud infrastructure providers for data storage and backup services.
• Customer Support Tools: Live chat software, email service providers, and ticketing systems that facilitate customer communications.

All third-party service providers are contractually bound to maintain data confidentiality, use information only for specified purposes, and implement appropriate security measures. We conduct due diligence to ensure service providers meet international data protection standards.

4.2 Legal Obligations and Safety

We may disclose your information when required by law or to protect rights and safety:

• In response to valid legal processes (court orders, subpoenas, warrants) from competent authorities
• To comply with regulatory requirements and licensing obligations
• To prevent fraud, money laundering, or criminal activity
• To protect the safety, rights, and property of 898aa, our users, or the public
• To enforce our Terms & Conditions and investigate terms violations

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity as part of business assets. Users will be notified via email and Website notice before such transfer, and the new entity will remain bound by this Privacy Policy unless you consent to a revised policy.

4.4 With Your Consent

We may share your information for purposes not described in this Privacy Policy if we obtain your explicit consent at the time of sharing.

5. Data Security Measures

Protecting your personal information is a top priority at 898aa. We implement comprehensive technical, administrative, and physical security measures to safeguard your data against unauthorized access, alteration, disclosure, or destruction.

5.1 Technical Security Controls

• 256-bit SSL/TLS Encryption: All data transmitted between your device and 898aa servers is encrypted using bank-grade SSL (Secure Sockets Layer) certificates, protecting information during transmission.
• Encrypted Data Storage: Sensitive personal information and financial data are encrypted at rest using AES-256 encryption algorithms, ensuring data remains protected even if storage systems are compromised.
• Two-Factor Authentication (2FA): Optional 2FA adds an extra security layer requiring both password and time-based verification code for account access.
• Secure Password Storage: User passwords are hashed using bcrypt or similar cryptographic algorithms with salting, making passwords unrecoverable even in the event of database breach.
• Firewall Protection: Network firewalls and intrusion detection systems monitor and block unauthorized access attempts.
• DDoS Protection: Distributed Denial of Service protection ensures platform availability during attack attempts.

5.2 Administrative Security Controls

• Access Controls: Personal data access is restricted to authorized employees and contractors on a need-to-know basis using role-based access controls (RBAC).
• Staff Training: All employees receive mandatory data protection and security awareness training.
• Background Checks: Employees with data access undergo background verification.
• Confidentiality Agreements: All staff and contractors sign confidentiality and non-disclosure agreements.
• Incident Response Plan: Documented procedures for detecting, responding to, and recovering from security incidents.

5.3 Physical Security Controls

• Data centers hosting 898aa infrastructure employ 24/7 physical security, access controls, surveillance systems, and environmental protections.
• Server facilities are geographically distributed with redundancy and disaster recovery capabilities.

5.4 Payment Security

Financial transactions through Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja) utilize secure payment gateways with PCI DSS (Payment Card Industry Data Security Standard) compliance where applicable. 898aa does not store complete bank account numbers or e-wallet credentials; we store only tokenized references necessary for processing transactions.

5.5 Security Limitations

While we implement industry-leading security measures, no system is completely invulnerable. Users share responsibility for account security by choosing strong passwords, enabling two-factor authentication, keeping login credentials confidential, and promptly reporting suspected security incidents. 898aa is not liable for unauthorized access resulting from user negligence, such as sharing passwords or falling victim to phishing attacks.

6. Data Retention and Storage

898aa retains your personal information only as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements.

6.1 Retention Periods

• Active Account Data: Account information, gaming activity, and transaction history are retained for the duration of your active account plus five (5) years after account closure to comply with regulatory recordkeeping requirements and fraud prevention.
• KYC/Identity Documents: Verification documents (KTP, proof of address, selfies) are retained for seven (7) years after account closure for anti-money laundering compliance.
• Financial Transaction Records: Deposit and withdrawal records are retained for seven (7) years to comply with financial regulations and tax requirements.
• Marketing Communications: Marketing consent records are retained until you withdraw consent, plus three (3) years for regulatory compliance.
• Support Communications: Customer service communications are retained for three (3) years for quality assurance and dispute resolution.
• Cookies and Technical Data: See Section 8 for cookie-specific retention periods (typically 30 days to 2 years depending on purpose).

6.2 Data Storage Locations

Your personal information is stored on secure servers located in data centers with advanced security certifications. While 898aa primarily serves Indonesian players, data may be stored in geographically distributed data centers outside Indonesia to ensure platform performance, redundancy, and disaster recovery capabilities. All data transfers comply with applicable data protection regulations, and third-party data processors are contractually bound to maintain equivalent security standards.

6.3 Data Deletion

After applicable retention periods expire, personal information is securely deleted or anonymized to prevent recovery. Deletion methods include cryptographic erasure, overwriting, and physical destruction of storage media. You may request early deletion of your data by contacting our Data Protection team, subject to legal and regulatory retention requirements.

7. Your Privacy Rights

As a 898aa user, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request confirmation of what personal information 898aa holds about you and obtain a copy of that information. To exercise this right, submit a data access request through your account dashboard or by contacting our Data Protection team. We will provide the requested information within 30 days in commonly used electronic format.

7.2 Right to Rectification

If you believe any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request correction. You can update most account information directly through your account settings. For KYC documents or information that cannot be self-updated, contact customer support with supporting documentation.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information under certain circumstances, including when information is no longer necessary for its original purpose, you withdraw consent (for consent-based processing), or you object to processing. This right is subject to legal and regulatory retention requirements that may mandate continued data storage (see Section 6). To request erasure, contact our Data Protection team.

7.4 Right to Restriction of Processing

You may request that we limit how we use your personal information while disputes are resolved, such as if you contest data accuracy or object to processing. During restriction periods, data will be stored but not actively processed except with your consent or for legal purposes.

7.5 Right to Data Portability

You have the right to receive personal information you provided to 898aa in a structured, commonly used, machine-readable format (CSV or JSON) and to transmit that data to another service provider where technically feasible.

7.6 Right to Object

You may object to processing of your personal information for direct marketing purposes at any time by adjusting account preferences, clicking unsubscribe links, or contacting customer support. For other processing purposes, you may object by contacting our Data Protection team, and we will cease processing unless compelling legitimate grounds override your interests.

7.7 Right to Withdraw Consent

Where processing is based on your consent (such as marketing communications), you may withdraw consent at any time through account settings or by contacting customer support. Withdrawal does not affect the lawfulness of processing before withdrawal.

7.8 Right to Lodge a Complaint

If you believe 898aa has violated your data protection rights, you have the right to lodge a complaint with a relevant data protection authority in your jurisdiction. We encourage you to contact us first so we can address your concerns directly.

7.9 Exercising Your Rights

To exercise any of these rights, contact our Data Protection team at [email protected] with "Privacy Rights Request" in the subject line, or use the data request form in your account dashboard. We will respond to verified requests within 30 days. Identity verification may be required to protect against fraudulent requests.

8. Cookies and Tracking Technologies

898aa uses cookies, web beacons, pixels, and similar tracking technologies to enhance user experience, maintain session security, and analyze platform performance.

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They enable websites to recognize your device, remember preferences, maintain login sessions, and collect usage analytics. Cookies do not contain personally identifiable information and cannot execute code or deliver viruses.

8.2 Types of Cookies We Use

Essential Cookies (Required): Necessary for website operation and cannot be disabled. These cookies enable core functionalities including account authentication, session management, security features, load balancing, and fraud prevention. Retention: Session-based (deleted when browser closes) or up to 30 days.

Performance Cookies (Optional): Collect anonymous usage statistics including pages visited, time on site, error messages, and loading times. These cookies help us identify and fix technical issues and optimize platform performance. We use analytics services that aggregate and anonymize data. Retention: Up to 2 years.

Functional Cookies (Optional): Remember your preferences including language settings, timezone (WIB), display settings, and game favorites. These cookies enhance user experience by personalizing the interface. Retention: Up to 1 year.

Targeting/Advertising Cookies (Optional): 898aa does not currently use third-party advertising cookies. If we implement advertising partnerships in the future, we will update this policy and obtain your consent before deploying such cookies.

8.3 Managing Cookie Preferences

You can control cookie settings through your account preferences or browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications before cookies are stored. Note that blocking essential cookies will impair website functionality and prevent account access.

Browser-specific instructions:

• Chrome: Settings > Privacy and Security > Cookies and other site data
• Firefox: Options > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Cookies and website data
• Edge: Settings > Privacy, search, and services > Cookies and site data

8.4 Third-Party Cookies

Game providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft, Spribe) may place cookies when you play their games through the 898aa platform. These cookies enable game functionality, store game states, and may collect anonymous usage data. Third-party cookie use is governed by the respective provider's privacy policies.

9. International Data Transfers

While 898aa primarily serves Indonesian players, your personal information may be transferred to and processed in countries outside Indonesia where our service providers, data centers, or business partners operate. These transfers are necessary to provide the Services, including game content delivery, payment processing, and platform infrastructure.

When transferring data internationally, we ensure appropriate safeguards are in place:

• Data Processing Agreements containing standard contractual clauses approved by international data protection authorities
• Ensuring recipient countries provide adequate data protection standards
• Requiring service providers to implement technical and organizational security measures equivalent to those described in this Privacy Policy

By using 898aa Services, you acknowledge and consent to international data transfers as described above. If you have concerns about international transfers, please contact our Data Protection team.

10. Children's Privacy

898aa Services are strictly prohibited for individuals under 21 years of age. We do not knowingly collect personal information from anyone under the age of 21. Our registration process requires age verification, and we conduct mandatory KYC (Know Your Customer) checks using Indonesian National Identity Card (KTP) to verify that all users meet the minimum age requirement.

If we become aware that we have inadvertently collected personal information from someone under 21 years old, we will immediately delete that information and permanently close the associated account. If you believe a user under 21 has registered an account with 898aa, please contact customer support immediately at [email protected].

Parents and guardians should monitor their children's internet usage and prevent access to online gambling platforms. We recommend using parental control software to block access to gambling websites for underage individuals.

11. Changes to This Privacy Policy

898aa reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. The "Last Updated" date at the top of this document indicates when the policy was most recently revised.

Material changes that significantly affect your privacy rights will be communicated through prominent notice on the Website, email notification to registered users, or in-account messaging. Less significant updates may be posted without individual notification, so we encourage you to review this Privacy Policy periodically.

Your continued use of 898aa Services after Privacy Policy changes constitutes acceptance of the revised policy. If you do not agree with updated terms, you must cease using the Services and may request account closure through customer support.

12. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or 898aa's data practices, please contact our Data Protection team:

When contacting us regarding privacy matters, please provide:

• Your full name and account username (if applicable)
• Detailed description of your privacy inquiry or request
• Proof of identity (for data access, rectification, or deletion requests)
• Preferred method of response (email or secure in-account messaging)

We take all privacy inquiries seriously and will investigate and respond to your concerns within 30 days as required by applicable data protection regulations. For urgent security matters such as suspected account breaches or unauthorized data access, contact our 24/7 customer support via live chat for immediate assistance.