Privacy Policy — air888

Throughout this Privacy Policy, the following terms carry the meanings defined below:

air888 collects Personal Data across several categories depending on how you interact with the Platform. The table below summarizes each category and the specific data points it encompasses:

We collect Personal Data through the following channels:

• Direct Submission: When you register an account, complete your KYC verification, make a deposit or withdrawal request, contact our support team, or participate in a promotion, you provide Personal Data directly to us.
• Automated Technologies: When you browse the Platform, our servers automatically record Technical Data and Usage Data via server logs, cookies, pixel tags, and similar tracking technologies. This data is collected regardless of whether you hold a registered account.
• Payment Processors: When you initiate a deposit or withdrawal through a local bank or e-wallet, our payment processing partners transmit transaction confirmation data — including the payer name and partial account identifier — to our systems for reconciliation purposes.
• Identity Verification Partners: During the KYC process, we may engage reputable third-party identity verification services to authenticate the documents you submit. These partners transmit a verification result (confirmed / not confirmed) and, where applicable, a copy of the verified document to air888's secure storage.
• Fraud Prevention Systems: Our automated fraud-detection systems analyze behavioral patterns, device fingerprints, and transaction metadata to identify and prevent fraudulent or prohibited activity. This analysis generates derived data points that are stored as part of your account record.

air888 processes your Personal Data only where a clear, lawful purpose exists. The table below maps each processing activity to its purpose and the legal basis on which we rely:

air888 does not sell, rent, or trade your Personal Data to third parties for their own commercial use. We share your data only in the following limited and controlled circumstances:

• Payment Partners: We share the minimum necessary financial information with our payment processing partners to facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja. These partners are contractually required to protect your data and to use it only for the purpose of processing your transaction.
• Identity Verification Providers: Your KYC documents and personal identifiers are shared with our contracted identity verification partners solely for the purpose of confirming your identity and age. These providers are prohibited from using your documents for any other purpose.
• Fraud Prevention Networks: In cases of confirmed fraud, money laundering, or prohibited conduct, we may share relevant information with fraud prevention agencies, other operators, and payment networks to protect the integrity of the wider online gaming ecosystem.
• Legal and Regulatory Authorities: We will disclose Personal Data to law enforcement agencies, regulators, or courts where required to do so by law, valid legal process, or a binding order from a competent authority. We will notify you of such disclosure where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or substantially all of air888's assets, your Personal Data may be transferred to the successor entity. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.
• Professional Advisors: We may share your data with our lawyers, auditors, and insurers on a need-to-know basis, subject to professional obligations of confidentiality.

air888 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyze how our services are used. The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They manage your login session, maintain your account state across page loads, and enable core security features such as CSRF protection. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language display, last-accessed game category, and notification settings — so you do not need to reconfigure them on each visit. Disabling these cookies may reduce your experience but will not prevent you from using the Platform.
• Analytics Cookies: We use privacy-respecting analytics tools to understand aggregate user behavior on the Platform — for example, which pages receive the most traffic, where users drop off during registration, and how long game sessions typically last. The data collected by analytics cookies is aggregated and does not identify you individually.
• Security and Fraud-Detection Cookies: These cookies assist our fraud-detection systems in recognizing trusted devices and flagging anomalous access patterns. They form part of air888's broader account security infrastructure.

Most web browsers allow you to control cookie behavior through your browser settings, including the ability to delete existing cookies or block new ones from being set. Please note that disabling strictly necessary cookies will impair the Platform's core functionality. For detailed instructions on managing cookies in your browser, refer to your browser's official help documentation.

air888 retains Personal Data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law. The following retention schedules apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted from our active systems and, where applicable, from backup archives on a rolling schedule. Data that has been anonymized (i.e., it can no longer identify you) may be retained beyond these periods for statistical purposes.

air888 implements a layered security architecture designed to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Our key security measures include:

• TLS/SSL Encryption: All data transmitted between your browser or app and our servers is encrypted using Transport Layer Security (TLS 1.2 or higher). You will see the padlock icon in your browser's address bar confirming that your connection to air888 is secure.
• Password Hashing: User passwords are never stored in plain text. They are processed through a one-way cryptographic hashing algorithm with a unique salt per user. Even in the unlikely event of a database breach, your password cannot be recovered from the stored hash.
• Access Controls: Access to systems and databases containing Personal Data is restricted to air888 staff who require that access to perform their job functions. All such access is logged and subject to regular review.
• Infrastructure Security: Our Platform is hosted on infrastructure that employs firewalls, intrusion detection systems, and regular vulnerability scanning. We conduct periodic penetration testing to identify and address potential weaknesses before they can be exploited.
• Incident Response: air888 maintains a documented data-breach response plan. In the event of a confirmed breach affecting your Personal Data, we will notify you and the relevant authorities within the timeframe required by applicable law.
• Staff Training: All air888 staff with access to Personal Data receive mandatory data-protection training as part of their onboarding and on an annual basis thereafter.

As a User of the air888 Platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact us using the details in Clause 14. We will respond to all verified requests within 30 days:

air888 is strictly an adults-only platform. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process includes an age declaration, and our KYC process independently verifies the age of all users before withdrawal functionality is enabled.

If we discover — whether through KYC review, complaint, or any other means — that a registered user is under the age of 21, we will immediately:

• Suspend and permanently close the account.
• Void all bets and gaming activity conducted during the period of underage use.
• Securely delete all Personal Data associated with the account, except where retention is required by law to document the incident.
• Take appropriate steps to prevent re-registration by the same individual.

If you are a parent or guardian and believe that a minor in your care has registered an account on air888, please contact us immediately at the email address listed in Clause 14. We treat all such reports as urgent and will act within 24 hours of receiving a verified report.

air888's primary user base is in Indonesia, and we process the majority of Personal Data on servers located within or closely aligned to this region. However, some of our service providers — including identity verification partners and infrastructure providers — may be based in other countries.

Where Personal Data is transferred internationally, air888 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that provided under this Privacy Policy. These safeguards may include:

• Contractual data-processing agreements incorporating standard data-protection clauses.
• Transfer only to countries or entities that maintain an internationally recognized adequate level of data protection.
• Binding corporate rules where the recipient is part of the same corporate group as air888.

By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in countries other than Indonesia. We commit to ensuring that any such transfer is conducted lawfully and with appropriate protections in place.

The air888 Platform integrates games and content from reputable third-party game studios, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. When you launch a game provided by a third-party studio, a connection is established between your device and that studio's gaming servers. The studio may receive certain Technical Data (such as your session token and device type) necessary to deliver the game.

These game studios operate under their own privacy policies and data-protection frameworks. air888 requires all integrated game providers to maintain data-protection standards consistent with internationally recognized best practices as a condition of their integration on our Platform.

air888 is not responsible for the privacy practices of third-party studios or any external websites that you may navigate to from our Platform. We strongly encourage you to review the privacy policies of any third-party service you interact with.

air888 reserves the right to update this Privacy Policy at any time to reflect changes in our data-processing practices, legal requirements, or Platform functionality. When we make material changes, we will notify you by:

• Sending an email notification to your registered email address at least seven (7) days before the changes take effect.
• Displaying a prominent notice on the Platform for at least seven (7) days prior to the effective date.
• Updating the "Last Updated" date at the top of this page.

Your continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and request account closure before the changes take effect.

The current version of this Privacy Policy is always available at https://air888.cam/privacy-policy. We recommend that you revisit this page periodically to remain informed of how we protect your data.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please contact the air888 Data Protection team using the details below. We are committed to addressing all privacy inquiries promptly and transparently.

For related information, you may also review our Terms & Conditions, our Responsible Gaming guidelines, or visit our FAQ page for answers to common questions.