Privacy Policy — air163

This Privacy Policy ("Policy") describes how air163 ("we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "User") who access or register on the air163 platform at https://air163.bet (the "Platform"). This Policy applies to all users of the Platform, including registered account holders and unregistered visitors, wherever located, with particular relevance to users based in Indonesia.

By accessing the Platform and registering an Account, you confirm that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy is incorporated by reference into our Terms & Conditions, which govern your overall use of the Platform. If you do not agree with this Policy, please discontinue use of the Platform.

For the purposes of applicable data protection law, air163 is the data controller responsible for the personal data collected through the Platform. As data controller, air163 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is lawful, fair, and transparent.

All data-related enquiries, requests to exercise your rights, and complaints regarding the handling of your personal data should be directed to our dedicated privacy support channel at [email protected] with the subject line "Privacy Request". We will acknowledge your request within 5 business days and respond substantively within 30 calendar days.

air163 collects only the personal data that is necessary for the stated purposes described in Section 4. The categories of data we collect are as follows:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or political opinions unless specifically required for responsible gaming compliance purposes and with your explicit consent.

We collect personal data through the following mechanisms:

• Direct Submission. Data you provide when registering an Account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or responding to a promotional survey.
• Automated Technical Collection. Data collected automatically when you access the Platform, including IP addresses, device fingerprints, browser identifiers, and session logs. This collection occurs via server logs and, where applicable, first-party cookies (see Section 9).
• Payment Processors. When you make a deposit or request a withdrawal via a local Indonesian bank or e-wallet, our payment processing partners transmit transaction confirmation data to us including the originating account name and masked account number.
• Game Studio Providers. Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, Spribe, and Habanero — may transmit session metadata (game round IDs, bet amounts, outcomes) to air163 for account crediting and game history purposes.
• KYC Verification Partners. Where we use a third-party identity verification service to cross-check government ID documents or selfie photographs, that partner returns a verification result to air163 along with relevant identity confirmation data.

air163 uses your personal data only for the purposes for which it was collected. The primary uses are as follows:

• Account Operation. To register your Account, authenticate your identity on login, maintain your Balance, record your betting activity, and provide you with access to Platform features including the sportsbook, live casino, slot gacor (high-RTP slot games), roulette, and in-play betting markets.
• Payment Processing. To process deposits and withdrawals via your nominated Indonesian bank account or e-wallet, verify that payment accounts are registered in your name, and maintain an accurate IDR transaction ledger for your Account.
• KYC and Compliance. To verify your age (21+ requirement), identity, and residential address as required by our licensing conditions and anti-money laundering obligations. KYC data is also used to comply with any lawful request from a regulatory or law enforcement authority.
• Customer Support. To respond to your enquiries, resolve disputes, process responsible gaming requests (deposit limits, self-exclusion, session reminders), and provide Indonesian-speaking support during WIB peak hours.
• Platform Security. To detect and prevent fraud, unauthorised Account access, bot activity, bonus abuse, and other Prohibited Activities as defined in our Terms & Conditions.
• Service Improvement. To analyse aggregated, anonymised usage patterns in order to improve Platform performance, game selection, payment processing speeds, and user experience.
• Marketing Communications. To send you promotional offers, bonus notifications, and seasonal campaign messages (e.g., Idul Fitri promotions, Ramadhan special offers, Independence Day bonuses) where you have given consent or where we have a legitimate interest in direct marketing to existing users. You may opt out at any time via your account settings or by contacting support.
• Legal Obligations. To retain records as required by applicable law and to respond to lawful requests from government or regulatory bodies.

Each processing activity described in Section 4 is carried out on one or more of the following legal bases:

• Contractual Necessity. Processing required to perform the contract between you and air163 — that is, to operate your Account, process transactions, and provide access to Platform services.
• Legal Obligation. Processing required to comply with applicable law, including anti-money laundering regulations, age verification requirements, and lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests. Processing carried out in pursuit of air163's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights.
• Consent. Processing carried out on the basis of your explicit consent, including marketing communications and the collection of any sensitive personal data for responsible gaming purposes. You may withdraw consent at any time; withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

air163 does not sell your personal data to any third party. We share personal data with third parties only in the following circumstances and only to the extent necessary for the stated purpose:

All third-party data processors engaged by air163 are required to enter into data processing agreements that obligate them to process your data only on air163's documented instructions, to implement appropriate technical and organisational security measures, and to delete or return data upon termination of the engagement.

We retain personal data for as long as necessary to fulfil the purposes outlined in this Policy, subject to the following minimum retention periods:

• Account and Identity Data: Retained for the duration of your Account plus a minimum of 5 years after Account closure, in order to satisfy anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, in accordance with applicable financial record-keeping obligations.
• KYC Verification Documents: Retained for a minimum of 5 years from the date of verification or from the date of Account closure, whichever is later.
• Activity Data (Betting History): Retained for the duration of your Account and for 2 years after Account closure, for dispute resolution purposes.
• Technical Data (Logs): Retained for up to 12 months from the date of collection, after which they are automatically purged or anonymised.
• Customer Support Communications: Retained for 3 years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing Preferences: Retained until you withdraw consent or request erasure, after which your preference to not receive marketing is retained indefinitely as a suppression record.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is delayed by a lawful hold (such as an ongoing legal proceeding), data will be deleted as soon as the hold is lifted.

air163 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL Encryption: All data in transit between your browser or app and the Platform is encrypted using TLS 1.2 or higher. The padlock icon in your browser's address bar confirms that your connection is secured.
• Encryption at Rest: Sensitive data fields — including passwords (stored as salted hashes), bank account details, and identity document scans — are encrypted at rest using AES-256 encryption.
• Access Controls: Internal access to personal data is restricted to employees and contractors who have a legitimate business need. Access is granted on a least-privilege basis and is logged and audited.
• Two-Factor Authentication: Users are encouraged to enable 2FA on their Accounts. Internal system access by air163 staff requires multi-factor authentication.
• Penetration Testing: The Platform undergoes periodic security assessments by qualified third-party security professionals to identify and remediate vulnerabilities.
• Incident Response: In the event of a data breach that is likely to result in a high risk to your rights and freedoms, air163 will notify affected users without undue delay and will take immediate steps to contain and remediate the breach.

air163 uses first-party cookies and similar technologies (such as local storage and session tokens) to operate the Platform. We do not use third-party advertising cookies or behavioral tracking networks. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in, security tokens that prevent cross-site request forgery (CSRF), and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Store your preferences such as preferred language, display settings, and in-play betting layout choices so that you do not need to re-set them on each visit.
• Analytics Cookies: First-party analytics cookies that help us understand how users navigate the Platform — for example, which game categories receive the most traffic, and where users exit the registration flow. This data is aggregated and anonymised before analysis. We do not use Google Analytics or other third-party analytics services that transmit user-level data off-platform.

You may manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from accessing the Platform but may affect your user experience. Disabling strictly necessary cookies will impair your ability to log in and use core Platform features.

As a user of the air163 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Request" and specify which right you wish to exercise.

We will respond to all valid rights requests within 30 calendar days. Where a request is complex or where we receive a high volume of requests, we may extend this period by a further 30 days and will notify you accordingly. We will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive.

As part of our KYC process, all users are required to submit a government-issued photo ID confirming their date of birth prior to their first withdrawal. Users found to be under 21 at any point will have their Accounts permanently closed in accordance with our Responsible Gaming policy and our Terms & Conditions.

The air163 Platform is operated by an internationally licensed gaming entity. As a result, your personal data may be processed and stored on servers located outside of Indonesia. Where personal data is transferred to a jurisdiction that does not provide a level of data protection equivalent to Indonesian law, air163 implements appropriate safeguards including:

• Standard contractual data protection clauses incorporated into agreements with all overseas data processors;
• Technical security measures (encryption in transit and at rest) applied consistently regardless of the data's geographic location;
• Strict access controls limiting who within overseas entities may access Indonesian user data.

By using the Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Indonesia for the purposes described in this Policy, subject to the safeguards described above.

air163 reserves the right to update or revise this Privacy Policy at any time. When we make a material change to the way we collect or use your personal data, we will notify you by email to the address associated with your Account at least 14 days before the change takes effect, and we will update the "Last Updated" date at the top of this page.

For minor or non-material changes — such as clarifications of existing language, corrections of typographical errors, or updates to contact details — we will update this page without individual notification. We encourage you to review this Policy periodically to stay informed of how we handle your data. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how air163 has handled your personal data, please contact us through any of the following channels:

• Email (Privacy Requests): [email protected] — please use the subject line "Privacy Request" to ensure your message is routed to our privacy team promptly.
• Live Chat: Available 24 hours a day, 7 days a week via the in-app chat system after logging in to your Account.
• WhatsApp Support: Available 08:00–23:00 WIB — contact details displayed within the Platform after login.

We aim to acknowledge all privacy-related enquiries within 5 business days and to resolve substantive requests within 30 calendar days. If you are dissatisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.