Your privacy matters to us. This Privacy Policy explains exactly what personal data air68 collects, why we collect it, how we protect it, and what rights you have over your information as a Member of our platform.
air68 is committed to handling the personal data of its Members, visitors, and prospective players with the highest standards of care, transparency, and security. This Privacy Policy sets out a comprehensive account of our data practices — covering what we collect, why we collect it, the legal bases on which we process it, who we may share it with, how long we retain it, and the rights available to you as a data subject.
air68 operates as an online gaming and sports betting platform serving the Indonesian market. All data processing activities described in this policy are carried out by air68 and its authorised service providers in connection with the delivery of our gaming, financial transaction, customer support, and platform security services.
This policy should be read alongside our Terms & Conditions and our Responsible Gaming page, which together form the complete contractual and policy framework governing your use of air68.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other information. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, alteration, retrieval, and deletion. |
| "Data Controller" | air68 — the entity that determines the purposes and means of processing your Personal Data. |
| "Data Processor" | A third-party service provider that processes Personal Data on behalf of air68 under a written data-processing agreement. |
| "Member" / "You" | Any individual who has registered an Account on air68 or is browsing the platform as a visitor. |
| "KYC" | Know Your Customer — the identity and document verification process required for account activation and withdrawal processing. |
| "Cookie" | A small text file placed on your device by the air68 platform that stores session, preference, or analytics data. |
air68 collects Personal Data across several categories, depending on how you interact with the platform. The table below summarises the categories of data we may hold about you:
| Category | Examples |
|---|---|
| Identity Data | Full legal name, date of birth, gender, national identity number (KTP), passport number, photograph on identity documents. |
| Contact Data | Registered email address, mobile phone number, residential address (city and province within Indonesia). |
| Financial Data | Bank account number and account name (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata); e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja); deposit and withdrawal transaction history; account balance records. |
| Gameplay & Wagering Data | Bet history, game session logs, game titles and studios accessed, stake amounts, win/loss records, bonus redemption history. |
| Technical Data | IP address, device type and model, browser type and version, operating system, screen resolution, session duration, referral URL. |
| Communications Data | Records of live chat conversations, email correspondence with the support team, and any feedback or complaint submissions. |
| Compliance Data | KYC verification status, identity document copies, source-of-funds declarations, self-exclusion status, responsible gaming tool settings. |
We collect your Personal Data through the following means:
air68 processes your Personal Data for the following purposes. We do not use your data for any purpose that is incompatible with those listed here without first obtaining your explicit consent or establishing a separate legal basis.
Every processing activity carried out by air68 rests on one or more of the following legal bases:
air68 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may share your data only in the following circumstances:
air68 retains Personal Data only for as long as necessary to fulfil the purposes set out in this policy, or as required by applicable legal, regulatory, accounting, or reporting obligations. The table below sets out our standard retention periods by data category:
| Data Category | Retention Period |
|---|---|
| Identity & KYC Data | 5 years from account closure or last active session (whichever is later), in line with AML record-keeping standards. |
| Financial Transaction Records | 5 years from the date of each transaction. |
| Gameplay & Wagering Logs | 3 years from the date of each session, or until account closure if sooner. |
| Support Communications | 2 years from the date of the last communication in each thread. |
| Technical & Device Data | 12 months from collection, then anonymised or deleted. |
| Marketing Consent Records | Retained for the duration of your consent and for 3 years thereafter as evidence of consent. |
Where your Account has been suspended due to a fraud or compliance investigation, relevant data may be retained beyond the standard periods until the investigation is formally closed.
air68 applies a layered security architecture to protect your Personal Data from unauthorised access, loss, alteration, or disclosure. Our key technical and organisational measures include:
No online platform can guarantee absolute security. In the event of a data breach that poses a material risk to your rights, air68 will notify affected Members promptly and take all reasonable steps to contain and remediate the incident.
air68 uses cookies and similar tracking technologies to operate the platform correctly, remember your session preferences, and understand how Members interact with the site. We do not use cookies to build advertising profiles or to track your activity on third-party websites.
| Cookie Type | Purpose | Essential? |
|---|---|---|
| Session Cookies | Maintain your login session across page loads. Deleted when you close your browser. | Yes |
| Security Cookies | Support CSRF protection and login fraud detection mechanisms. | Yes |
| Preference Cookies | Remember your language, display, and responsible gaming settings. | No |
| Analytics Cookies | Collect anonymised usage statistics to help us improve platform performance and navigation. | No |
You may configure your browser to refuse or delete cookies at any time. Disabling essential cookies will prevent certain platform functions — including account login and game play — from operating correctly. Non-essential analytics and preference cookies may be disabled without affecting core functionality.
As a Member of air68, you have the following rights in respect of your Personal Data. To exercise any of these rights, contact the support team at [email protected]. We will acknowledge your request within 48 hours and respond substantively within 30 calendar days.
Right of Access
Request a copy of the Personal Data air68 holds about you, including the categories of data, processing purposes, and retention periods.
Right of Rectification
Request correction of any inaccurate or incomplete Personal Data we hold about you. Some corrections may require supporting documentation.
Right to Erasure
Request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
Right to Restrict Processing
Request that we limit processing of your data — for example, while a rectification request is being verified or while a complaint is under review.
Right to Portability
Request a machine-readable export of Personal Data you have provided to air68, where technically feasible and where processing is based on contract or consent.
Right to Object
Object to processing based on legitimate interests, including direct marketing. Objections to marketing will be actioned immediately and without conditions.
air68 applies a strict 21+ age policy. The platform is not intended for, and does not knowingly collect Personal Data from, any individual under the age of 21. Age verification is a mandatory step in our KYC process, and registrations that fail age verification are rejected automatically.
If air68 becomes aware that it has inadvertently collected Personal Data from an individual under 21, that data will be deleted immediately, the associated Account will be permanently suspended, and any balances will be dealt with in accordance with our Terms & Conditions.
If you are a parent or guardian and believe that a minor in your care may have accessed air68, please contact the support team at [email protected] immediately. We will investigate and take appropriate action without delay.
air68's primary server infrastructure is located in jurisdictions with robust data protection frameworks. In the course of delivering its services, air68 may transfer certain Personal Data to service providers operating in other countries — for example, cloud hosting providers, KYC verification platforms, or game studio analytics systems.
Wherever Personal Data is transferred internationally, air68 ensures that appropriate safeguards are in place — including data-processing agreements that incorporate binding obligations on the receiving party to apply security standards and processing restrictions equivalent to those described in this policy.
air68 does not transfer Member Personal Data to jurisdictions that do not offer an adequate level of data protection without first putting in place contractual safeguards sufficient to protect your rights.
air68 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes, we will notify active Members via the platform interface and/or by email to your registered address, at least seven (7) calendar days before the changes take effect.
The "Last updated" date at the top of this page reflects when the current version entered into force. We encourage you to review this policy periodically. Your continued use of air68 after the effective date of any update constitutes acceptance of the revised policy.
The current version of this Privacy Policy supersedes all prior versions and is the definitive statement of air68's data practices as of the date shown above.
For any questions, concerns, or requests relating to this Privacy Policy or to the Personal Data air68 holds about you, please contact us through the following channels:
When submitting a data rights request, please provide your registered account username and email address so that we can verify your identity before processing the request. air68 will not action data rights requests from unverified individuals in order to protect Members from fraudulent data requests made by third parties.
Six concrete measures that underpin our commitment to data security and privacy on the air68 platform.
Every data exchange between your browser and air68's servers is encrypted end-to-end using 256-bit SSL/TLS. Your login credentials, financial details, and personal information travel over a fully encrypted connection at all times.
air68 never stores passwords in readable form. All passwords are processed through a one-way cryptographic hash function, meaning that even our own staff cannot retrieve your password — only you know it. Two-factor authentication via SMS OTP is available as an extra layer of protection.
Identity verification is required for all Members before withdrawals are processed. This protects both the platform and you — ensuring that your funds can only be released to an account in your verified name, preventing third-party fraud.
air68 does not sell, rent, or broker your Personal Data to advertisers, data companies, or any unrelated third party. The data you provide is used exclusively to deliver, secure, and improve the air68 service for you — nothing else.
Access to Member data within air68's internal systems is governed by role-based permissions. Only team members with a documented business need are authorised to view personal records, and all access is logged and audited.
Data is kept only as long as legally required or operationally necessary. Technical logs are anonymised or deleted within 12 months. Closed accounts' financial records are retained for 5 years to meet AML standards, then permanently purged.
Now that you understand exactly how air68 handles your personal data, you can play knowing your information is protected by bank-grade encryption and strict internal controls. Sign in and explore everything the platform has to offer — slots, live casino, and sportsbook — all in IDR with full local bank support.
Adults only (21+). Gambling involves financial risk. Please play responsibly. See Responsible Gaming for self-exclusion and deposit limit tools.