This Privacy Policy applies to all personal data collected and processed by ari168 through the website at https://ari168.app and all associated services. By registering a Member account or continuing to use the ari168 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions.
Overview & Scope
ari168 ("the Platform", "We", "Us", "Our") is committed to protecting the personal data of every individual who interacts with our services. This Privacy Policy applies to:
- All registered Members of the ari168 platform, including individuals who have applied for membership but whose application has not yet been completed or approved.
- All visitors to the ari168 website at https://ari168.app, regardless of whether they hold a registered account.
- Any individual who contacts ari168 support via live chat, WhatsApp, or email.
ari168 operates as a Licensed and Regulated Internationally platform, offering online sports betting, togel (Indonesia's traditional numbers lottery), live casino, and slot games to adult residents of Indonesia. This Privacy Policy reflects our obligations under applicable international data protection standards and our commitment to transparent, lawful data handling.
This Policy does not cover the data practices of third-party websites, payment processors, or game studios whose products are available on the platform. We encourage you to review the privacy policies of those third parties independently, as ari168 is not responsible for their data handling practices.
Definitions
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living individual, either on its own or in combination with other data. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, transfer, alteration, or deletion. |
| "Data Subject" | The individual to whom personal data relates — in the context of this Policy, this means a Member or visitor to the ari168 platform. |
| "Data Controller" | ari168, which determines the purposes and means by which personal data is collected and processed. |
| "Third-Party Processor" | An external service provider that processes personal data on behalf of ari168 under a contractual data processing agreement. |
| "Cookies" | Small text files placed on a user's device by the ari168 website to store session data, preferences, and analytics information. |
| "KYC" | Know Your Customer — the identity verification process used by ari168 to confirm the age, identity, and residential status of Members. |
Data We Collect
ari168 collects the following categories of personal data from Members and visitors. We collect only what is necessary for the stated purposes and do not engage in excessive data collection.
| Category | Examples | Collected From |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, national identity number (KTP number), passport number | Registration form, KYC submission |
| Contact Data | Email address, mobile phone number, residential address (city, province, postal code) | Registration form, account settings |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction records | Payment processing, KYC verification |
| Identity Documents | Scanned or photographed copies of KTP, passport, or driving licence submitted during KYC | KYC submission process |
| Account Activity Data | Bet history, game session records, deposit and withdrawal history, bonus claim records, login timestamps | Platform activity (automatically recorded) |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, time zone (WIB/WITA/WIT), session duration | Automatic collection via browser/server logs |
| Communications Data | Live chat transcripts, WhatsApp messages sent to our support number, email correspondence with our support team | Customer support interactions |
| Marketing Preferences | Opt-in/opt-out status for promotional emails and SMS notifications, preferred game categories | Account settings, user behaviour on platform |
🔎 Sensitive Data: ari168 does not deliberately collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information. If you voluntarily disclose such information during a support interaction, we will handle it with the highest level of care and will not use it for any purpose beyond addressing your specific support query.
How We Collect Data
ari168 collects personal data through the following mechanisms:
- Direct Submission: When you complete the registration form, submit KYC documents, update your account profile, or contact our support team, you provide data to us directly. This is the primary source of identity, contact, and financial data.
- Automated Technical Collection: When you visit the ari168 website, our servers automatically record technical data including your IP address, browser type, and session activity. This data is collected through server logs, cookies, and similar tracking technologies described in Section 10.
- Platform Activity Tracking: All betting activity, game session data, and financial transactions on the platform are recorded automatically as a necessary function of operating the service and fulfilling our regulatory obligations.
- Third-Party Verification Services: During the KYC process, ari168 may use third-party identity verification providers to cross-reference the documents you submit. These providers process your data strictly under contractual data processing agreements with ari168.
- Payment Processors: When you initiate a deposit or withdrawal via an Indonesian bank or e-wallet, relevant transaction confirmation data is shared with ari168 by the payment processor to credit or debit your account correctly.
Purposes of Processing
ari168 processes your personal data for the following specific, documented purposes. We do not use your data for any purpose that is incompatible with those listed below:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management — setting up and maintaining your ari168 Member account. | Identity Data, Contact Data |
| Age and identity verification (KYC) — confirming that you are at least 21 years of age and are who you claim to be. | Identity Data, Identity Documents, Financial Data |
| Payment processing — crediting deposits and processing withdrawal requests to your nominated Indonesian bank account or e-wallet. | Financial Data, Identity Data |
| Platform operation and game delivery — enabling you to place bets, play casino games, participate in togel draws, and use all other platform features. | Account Activity Data, Technical Data |
| Fraud prevention and security — detecting and preventing fraudulent account activity, money laundering, bonus abuse, and unauthorised access. | Technical Data, Financial Data, Account Activity Data |
| Anti-money laundering (AML) compliance — fulfilling our obligations to monitor and report suspicious financial activity as required by applicable international AML standards. | Identity Data, Financial Data, Account Activity Data |
| Responsible gaming — monitoring betting patterns to identify Members who may be showing signs of problem gambling and enabling Responsible Gaming Tools. | Account Activity Data, Communications Data |
| Customer support — responding to queries, complaints, and account-related requests submitted via live chat, WhatsApp, or email. | Identity Data, Contact Data, Communications Data |
| Marketing communications — sending you promotional offers, bonus notifications, and platform updates where you have consented to receive them. | Contact Data, Marketing Preferences, Account Activity Data |
| Platform improvement and analytics — analysing aggregated usage data to improve the performance, design, and feature set of the ari168 platform. | Technical Data, Account Activity Data (anonymised/aggregated) |
Legal Basis for Processing
ari168 relies on the following legal bases for processing personal data, consistent with internationally recognised data protection principles:
- Contractual Necessity: Processing that is required to perform the contract between ari168 and a Member — including account creation, KYC verification, payment processing, and game delivery — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
- Legal Obligation: Certain processing activities — such as AML monitoring, identity verification, and record-keeping of financial transactions — are carried out because ari168 is legally required to do so under applicable international regulatory standards.
- Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is carried out on the basis of ari168's legitimate interest in operating a safe, fair, and commercially viable platform. We conduct a balancing test to ensure that our legitimate interests do not override your fundamental rights.
- Consent: Processing for marketing communications and non-essential cookies is carried out on the basis of your freely given, specific, and informed consent. You may withdraw your consent at any time by updating your account communication preferences or by contacting our support team.
Data Sharing & Disclosure
ari168 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following limited circumstances:
- Payment Service Providers: We share the minimum necessary financial and identity data with our Indonesian payment processing partners — including banks such as BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, and Bank Permata, and e-wallet providers including OVO, DANA, GoPay, ShopeePay, and LinkAja — to process your transactions. These partners are bound by their own regulatory obligations and are not permitted to use your data beyond the payment processing purpose.
- KYC and Identity Verification Providers: To complete the identity verification process, ari168 may share submitted identity documents with accredited third-party KYC verification service providers. These providers operate under strict contractual data processing agreements and are prohibited from using your data for any purpose other than verification.
- Game Studio Providers: When you play a game powered by a third-party studio — such as Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, or Spribe — limited session and account reference data is shared with the studio's game server to deliver and record the game session. Game studios do not receive your full identity or financial details.
- Regulatory and Law Enforcement Authorities: ari168 may disclose personal data to relevant regulatory bodies, law enforcement agencies, or courts of law where required to do so by a valid legal order, warrant, or regulatory obligation. We will notify you of any such disclosure where legally permissible to do so.
- Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of ari168's business, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify you of any such transfer and the acquiring entity will be bound by this Privacy Policy.
- Professional Advisers: ari168 may share data with its legal counsel, auditors, and compliance consultants on a strictly need-to-know basis, subject to professional confidentiality obligations.
Some of ari168's third-party service providers may be located outside of Indonesia. Where personal data is transferred internationally, ari168 takes appropriate safeguards — including contractual data protection clauses — to ensure that your data receives a standard of protection consistent with this Privacy Policy.
Data Retention
ari168 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable regulatory obligations. The following retention periods apply as general guidelines:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of membership + 5 years after account closure | AML compliance, regulatory audit obligations |
| Financial Transaction Records | Duration of membership + 7 years after account closure | Financial record-keeping and AML requirements |
| KYC Documents | Duration of membership + 5 years after account closure | Regulatory compliance, fraud prevention |
| Betting & Game Activity | Duration of membership + 3 years after account closure | Dispute resolution, responsible gaming monitoring |
| Support Communications | 3 years from the date of the interaction | Quality assurance, dispute resolution |
| Technical / Server Logs | 12 months on a rolling basis | Security monitoring, fraud detection |
| Marketing Preferences | Until consent is withdrawn or account is closed | Consent management |
After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.
Security Measures
ari168 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:
- TLS 1.3 Encryption in Transit: All data transmitted between your browser and the ari168 platform is encrypted using Transport Layer Security (TLS) version 1.3, the current industry standard. This is indicated by the padlock icon in your browser's address bar.
- Encryption at Rest: Sensitive personal data — including identity documents, financial records, and hashed account credentials — is encrypted in our database storage systems.
- Password Hashing: Member account passwords are never stored in plain text. They are hashed using a strong, salted cryptographic algorithm so that even ari168 staff cannot view your password.
- Access Controls: Access to Member personal data within ari168 is restricted on a strict need-to-know basis using role-based access controls. Only staff members whose job function requires access to specific data categories are granted those access rights.
- Fraud Detection Systems: ari168 operates automated fraud and anomaly detection systems that monitor account activity in real time to identify and flag suspicious behaviour, including unusual login locations, abnormal transaction patterns, and potential account takeover attempts.
- Regular Security Assessments: ari168 conducts periodic security reviews and vulnerability assessments of its platform infrastructure to identify and remediate potential weaknesses before they can be exploited.
- Staff Training: All ari168 staff who handle personal data receive regular data protection and information security training.
⚠️ Your Responsibilities: While ari168 takes extensive technical precautions, the security of your account also depends on you. You are responsible for choosing a strong, unique password, keeping your login credentials confidential, and logging out of your account on shared devices. If you suspect that your account has been accessed without your authorisation, contact ari168 support immediately via live chat.
Cookies & Tracking Technologies
The ari168 website uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. The following categories of cookies are used:
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Strictly Necessary | Essential for the platform to function — maintains your login session, stores your language and currency preferences, and enables core security features. Cannot be disabled. | No — these are required for the platform to operate. |
| Functional | Remembers your account preferences, such as your preferred game lobby view, notification settings, and responsible gaming limit configurations. | No — these are necessary to deliver the service as you have configured it. |
| Analytics | Collects anonymised data on how Members navigate and interact with the platform, enabling us to identify usability issues and improve the overall experience. | Yes — you may opt out via your account settings. |
| Security / Fraud Detection | Fingerprints device and session characteristics to detect and prevent account fraud, multiple-account registration, and bonus abuse. | No — these are required for platform integrity and Member protection. |
You can manage your cookie preferences via your ari168 account settings. Please note that disabling strictly necessary or security cookies will impair the functionality of the platform and may prevent you from logging in or placing bets. ari168 does not use third-party advertising cookies or serve targeted advertisements to Members on the platform.
Your Rights as a Data Subject
As a Member of ari168, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team via live chat or at [email protected]. We will respond to all verified requests within 30 calendar days.
Right of Access
You may request a copy of all personal data that ari168 holds about you, along with information about how it is being processed.
Right to Rectification
You may request correction of any personal data that is inaccurate or incomplete. Some corrections may require re-verification of your identity.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal obligation requires its retention.
Right to Restriction
You may request that ari168 restrict the processing of your data in certain circumstances — for example, while a data accuracy dispute is under investigation.
Right to Data Portability
You may request a copy of your personal data in a structured, machine-readable format that can be transferred to another service provider.
Right to Object
You may object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes. You may also withdraw marketing consent at any time.
Please note that certain rights may be limited where ari168 is required to retain your data to comply with a legal obligation — for example, AML record-keeping requirements may prevent us from immediately erasing financial transaction data even if you submit an erasure request.
Minors
The ari168 platform is strictly intended for adults aged 21 and over. We do not knowingly collect or process personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration process, and we reserve the right to request documentary proof of age at any time.
If ari168 discovers — through KYC review, third-party verification, or any other means — that an account is held by an individual under 21 years of age, the following actions will be taken immediately:
- The account will be suspended and access to the platform will be revoked.
- Any balance held in the account, including winnings, will be withheld pending investigation.
- All personal data associated with the account will be securely deleted, except where retention is required by applicable law.
- The incident will be recorded for internal compliance purposes.
If you are a parent or guardian and believe that your child may have registered an account on ari168, please contact us immediately at [email protected] or via live chat so that we can take prompt action.
Changes to This Privacy Policy
ari168 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or operational procedures. When material changes are made, we will notify registered Members by:
- Sending a notification to your registered email address at least 14 days before the revised Policy takes effect.
- Displaying a prominent notice on the ari168 platform homepage at the time the update is published.
The "Last Updated" date at the top of this page will always reflect when the current version entered into force. Your continued use of the ari168 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.
We encourage you to review this Privacy Policy periodically. The most current version will always be available at https://ari168.app/privacy-policy.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a data protection concern, please contact the ari168 support team through any of the following channels:
- 📧 Email: [email protected] (plain text — not a clickable link)
- 💬 Live Chat: Available 24/7 from any page on the ari168 platform
- 📱 WhatsApp: +62 812 0000 1681
- 🕐 Response Hours: 24 hours a day, 7 days a week (WIB, UTC+7)
For requests relating to your personal data rights (access, rectification, erasure, portability), please include your registered email address and a brief description of your request. We will respond within 30 calendar days and may ask you to verify your identity before processing your request.
This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between you and ari168.