Privacy Policy

1. Introduction

This Privacy Policy applies to all users of aha303 services, including visitors to our website, registered account holders, and anyone who interacts with our platform. We recognize that privacy is a fundamental right, and we have implemented comprehensive measures to ensure your personal data is handled responsibly, securely, and in accordance with applicable data protection laws.

As a gaming platform serving Indonesian players, aha303 adheres to international data protection standards while recognizing the specific requirements and expectations of the Indonesian market. We process personal data fairly, lawfully, and transparently, and we provide you with meaningful control over your information.

This policy should be read in conjunction with our Terms and Conditions, which govern your use of aha303 services. If you have any questions about this Privacy Policy or how we handle your data, please contact our Data Protection Officer using the contact details provided at the end of this document.

2. Data Controller

aha303 acts as the data controller for all personal information collected through our platform. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that processing complies with applicable data protection laws.

When you provide personal information to aha303 or use our services, you enter into a direct relationship with us as the data controller. We are accountable for protecting your privacy rights and handling your data responsibly throughout its lifecycle.

3. Information We Collect

aha303 collects various categories of personal information necessary to provide gaming services, comply with legal obligations, and improve our platform. The information we collect includes:

3.1 Information You Provide Directly

When you register an account with aha303, you voluntarily provide the following information:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification number (Indonesian e-KTP or passport number)
• Contact Information: Email address, mobile phone number, residential address, and postal code
• Financial Information: Bank account details (account number, bank name, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja account details), transaction history, and payment preferences
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers
• Verification Documents: Copies of government-issued ID, proof of address documents (utility bills, bank statements), and proof of payment method ownership

3.2 Information Collected Automatically

When you access and use aha303 services, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers
• Connection Information: IP address, geographic location (country, city), internet service provider, and connection timestamps
• Usage Data: Pages visited, features used, games played, bet history, session duration, click patterns, and navigation paths
• Gaming Activity: Bets placed, amounts wagered, winnings, losses, game preferences, and playing patterns
• Communication Records: Customer support chat transcripts, email correspondence, and any other communications with aha303 staff

3.3 Information from Third Parties

In certain circumstances, we may receive information about you from third-party sources:

• Payment Processors: Transaction confirmation, payment success/failure notifications, and fraud detection signals from Indonesian banks and e-wallet providers
• Identity Verification Services: Age verification results, identity authentication confirmations, and fraud prevention checks
• Marketing Partners: Information about how you arrived at our platform (if you clicked an affiliate link or promotional campaign)

4. How We Use Your Data

aha303 processes your personal information for the following specific purposes:

4.1 Account Management and Service Delivery

• Creating and maintaining your gaming account
• Verifying your identity and age (21+ requirement)
• Processing deposits and withdrawal requests
• Providing customer support and responding to inquiries
• Managing your account preferences and settings
• Administering VIP programs and loyalty rewards

4.2 Gaming Operations

• Enabling you to place bets and play games
• Calculating odds, processing bets, and settling results
• Maintaining game history and transaction records
• Awarding bonuses and processing promotional offers
• Ensuring game fairness and integrity

4.3 Legal and Regulatory Compliance

• Complying with Know Your Customer (KYC) requirements
• Preventing underage gambling (enforcing 21+ age restriction)
• Detecting and preventing fraud, money laundering, and other illegal activities
• Responding to legal requests from law enforcement and regulatory authorities
• Maintaining records required by gaming licenses and regulations

4.4 Platform Security and Risk Management

• Monitoring for suspicious activity and potential security threats
• Detecting multiple accounts and terms violations
• Preventing bonus abuse and fraudulent betting patterns
• Protecting against hacking, phishing, and other cyber threats
• Ensuring platform stability and availability

4.5 Communication and Marketing

• Sending important account notifications and updates
• Providing information about new games, features, and promotions (with your consent)
• Delivering personalized gaming recommendations based on your preferences
• Conducting customer satisfaction surveys and feedback collection

4.6 Platform Improvement and Analytics

• Analyzing usage patterns to improve user experience
• Identifying popular games and features
• Testing new features and interface designs
• Generating aggregated, anonymized statistics and reports

5. Legal Basis for Processing

aha303 processes your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our agreement with you (providing gaming services, processing transactions, managing your account)
• Legal Obligations: Processing is required to comply with laws and regulations (KYC requirements, age verification, anti-money laundering obligations)
• Legitimate Interests: Processing serves our legitimate business interests (fraud prevention, security, platform improvement) while respecting your privacy rights
• Consent: Where required by law, we obtain your explicit consent for specific processing activities (marketing communications, cookies)

6. Data Sharing and Disclosure

aha303 does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your data with the following categories of recipients when necessary:

6.1 Service Providers and Business Partners

We share data with trusted third-party service providers who assist us in operating our platform:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and other game studios to deliver gaming content
• Identity Verification Services: Third-party KYC providers to verify your age and identity
• Cloud Hosting Providers: Secure data center operators who host our infrastructure
• Customer Support Platforms: Live chat and ticketing system providers

All service providers are contractually obligated to protect your data, use it only for specified purposes, and comply with applicable data protection laws.

6.2 Legal and Regulatory Authorities

We may disclose your information to law enforcement, regulatory bodies, or other government authorities when:

• Required by law or legal process (subpoena, court order, regulatory investigation)
• Necessary to prevent fraud, illegal activity, or threats to public safety
• Protecting our legal rights or defending against legal claims
• Complying with gaming license conditions and regulatory reporting requirements

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the successor entity. We will notify you of any such change and ensure the new controller remains bound by this Privacy Policy.

7. Data Security Measures

aha303 implements industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

7.1 Technical Security

• Encryption: All data transmissions use 256-bit SSL/TLS encryption. Sensitive data at rest is encrypted using AES-256 encryption standards
• Secure Infrastructure: Our servers are hosted in certified data centers with physical security controls, redundant power supplies, and climate control
• Firewall Protection: Advanced firewalls and intrusion detection systems monitor and block suspicious traffic
• Access Controls: Role-based access controls ensure only authorized personnel can access personal data, limited to what is necessary for their job functions
• Regular Security Audits: Independent third-party security firms conduct penetration testing and vulnerability assessments

7.2 Organizational Security

• All employees undergo background checks and sign confidentiality agreements
• Staff receive regular data protection and security awareness training
• We maintain comprehensive incident response procedures to address any security breaches promptly
• Password policies enforce strong authentication requirements

7.3 Your Role in Security

While we implement robust security measures, you also play a critical role in protecting your account:

• Use a strong, unique password and never share it with others
• Enable two-factor authentication if available
• Log out after each session, especially on shared devices
• Keep your contact information up-to-date so we can reach you if we detect suspicious activity
• Report any unauthorized access immediately to our support team

8. Data Retention

aha303 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law:

• Active Accounts: We retain your data for the duration of your active account relationship
• Closed Accounts: After voluntary account closure, we retain certain data for 5 years to comply with regulatory requirements, resolve disputes, and prevent fraud
• Transaction Records: Financial transaction data is retained for 7 years in accordance with Indonesian financial regulations and anti-money laundering requirements
• Marketing Data: If you opt out of marketing communications, we retain your email address to honor your opt-out preference
• Legal Hold: Data subject to legal proceedings, investigations, or regulatory inquiries is retained until the matter is resolved

After the retention period expires, we securely delete or anonymize your personal information so it can no longer identify you.

9. Your Privacy Rights

You have the following rights regarding your personal data held by aha303:

9.1 Right of Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used format within 30 days of your request.

9.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request corrections. You can update most information directly through your account settings, or contact our support team for assistance.

9.3 Right to Erasure

You may request deletion of your personal data, subject to certain limitations. We must retain some information to comply with legal obligations (financial records, KYC documentation) even after account closure.

9.4 Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances, such as while we verify data accuracy or assess your objection to processing.

9.5 Right to Data Portability

You have the right to receive your personal data in a portable format and request that we transfer it to another service provider where technically feasible.

9.6 Right to Object

You can object to processing based on legitimate interests. If you object to marketing communications, we will immediately cease such communications.

9.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing conducted before withdrawal.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We may request additional information to verify your identity before processing your request.

10. Cookies and Tracking Technologies

aha303 uses cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and provide personalized content. A cookie is a small text file stored on your device that helps us recognize you on subsequent visits.

Types of Cookies We Use:

• Essential Cookies: Necessary for platform functionality, enabling you to log in, navigate, and use features. These cannot be disabled without affecting core functionality
• Performance Cookies: Collect anonymous information about how you use our site, helping us identify errors and improve performance
• Functionality Cookies: Remember your preferences (language, display settings) to provide a personalized experience
• Analytics Cookies: Help us understand user behavior through aggregated statistics (page views, session duration, popular games)

You can manage cookie preferences through your browser settings. However, disabling certain cookies may limit your ability to use some features of aha303.

11. International Data Transfers

While aha303 primarily serves Indonesian players, some of our service providers and infrastructure may be located outside Indonesia. When we transfer personal data internationally, we ensure appropriate safeguards are in place:

• Standard contractual clauses approved by data protection authorities
• Transfers only to countries with adequate data protection frameworks
• Binding corporate rules ensuring consistent data protection standards

International transfers are limited to what is necessary for service delivery and always comply with applicable data protection laws.

12. Children's Privacy

13. Changes to This Privacy Policy

aha303 reserves the right to update this Privacy Policy to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:

• Post the updated policy on our website with a new "Last Updated" date
• Notify you via email if you have an active account
• Display a prominent notice on the platform for 30 days

Your continued use of aha303 services after notification constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us: