ags8 Privacy Policy

1.1 This Privacy Policy applies to all personal data processed by ags8 in connection with the online betting platform accessible at https://ags8.cam (the "Platform"). It covers data collected from players who register an account, browse the Platform as a guest, contact our support team, or interact with our services in any way.

1.2 This Policy should be read alongside our Terms & Conditions, which govern the overall relationship between ags8 and its players, and our Responsible Gaming policy, which outlines how we use certain data to identify and assist players who may be experiencing gambling-related harm.

1.3 ags8 serves players primarily in the Indonesian market. Our data practices are designed to align with internationally recognized privacy standards and to respect the expectations of players across Jakarta, Surabaya, Medan, Bandung, Bali, and all regions of Indonesia.

1.4 By registering an account on the ags8 Platform or continuing to use our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following terms have the meanings assigned below:

3.1 Registration Data. When you create an ags8 Account, we collect the information you provide during the registration process, including:

• Full legal name;
• Date of birth (to verify you are at least 21 years of age);
• Email address;
• Mobile phone number;
• Residential address (city, province, postal code, Indonesia);
• Preferred username and encrypted password.

3.2 KYC Verification Data. To comply with our anti-fraud and anti-money laundering obligations, we collect the following documents during the KYC process:

• A copy of your Indonesian National Identity Card (KTP) or valid government-issued photo ID;
• Proof of residential address (e.g., a recent bank statement or utility bill);
• A selfie photograph for facial comparison purposes.

3.3 Financial Data. We collect information necessary to process deposits and withdrawals, including:

• Bank account name and account number (for BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, or other supported banks);
• E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja);
• Transaction history, deposit amounts, and withdrawal records.

3.4 Gameplay Data. We collect records of your activity on the Platform, including bets placed, games played (including togel — Indonesia's traditional numbers lottery — and slot games), game outcomes, session durations, and betting patterns. This data is used for service improvement, fraud detection, and responsible gaming monitoring.

3.5 Technical Data. We automatically collect certain technical information when you access the Platform, including:

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Referring URL and pages visited on the Platform;
• Session timestamps and duration.

3.6 Communication Data. When you contact our support team via live chat or email, we retain records of those communications, including the content of your messages, timestamps, and any attachments provided.

4.1 Directly from You. The majority of your personal data is collected directly — through the account registration form, KYC submission process, deposit and withdrawal requests, support interactions, and any feedback or correspondence you initiate with ags8.

4.2 Automatically. Certain technical data is collected automatically through your use of the Platform, via server logs, cookies, and similar tracking technologies as described in Section 10 of this Policy.

4.3 From Third Parties. In limited circumstances, we may receive data about you from authorized third-party service providers, including:

• Payment processors and banking partners (e.g., transaction status confirmations from BCA, BRI, OVO, DANA);
• KYC and identity verification service providers;
• Fraud detection and anti-money laundering screening services.

ags8 processes your personal data for the following clearly defined purposes:

6.1 Contractual Necessity. Processing your registration data, KYC documents, financial data, and gameplay records is necessary for the performance of the contract between you and ags8 — specifically, the provision of a licensed online betting service as described in our Terms & Conditions.

6.2 Legal Obligation. Certain processing activities — including identity verification, transaction monitoring, and record retention — are required by applicable anti-money laundering regulations, licensing conditions, and other legal frameworks to which ags8 is subject as an internationally licensed operator.

6.3 Legitimate Interests. We process technical data, communication records, and gameplay analytics on the basis of our legitimate interests in maintaining platform security, detecting fraud, preventing problem gambling harm, and improving our services. We conduct a balancing test to ensure these interests do not override your fundamental rights.

6.4 Consent. Where we send you marketing communications or deploy non-essential cookies, we do so on the basis of your consent. You may withdraw your consent to marketing communications at any time by contacting our support team or clicking the unsubscribe link in any promotional email.

7.1 We Do Not Sell Your Data. ags8 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Your data is shared only in the circumstances described below.

7.2 Service Providers (Data Processors). We share data with carefully vetted third-party service providers who process it strictly on our behalf and under binding contractual obligations. These include:

• Payment gateway and banking partners (to process deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja);
• KYC and identity verification providers;
• Cloud infrastructure and hosting providers;
• Fraud detection and cybersecurity service providers;
• Customer support platform operators;
• Game content suppliers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft — who receive only the technical session data required to deliver game content).

7.3 Legal and Regulatory Disclosure. We may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where we are legally compelled to do so by a valid order, warrant, or legal obligation. In such cases, we will disclose only the minimum data required and, where legally permissible, will notify you of the disclosure.

7.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of ags8's business, your personal data may be transferred to the successor entity. We will notify you of any such transfer and ensure that the recipient is bound by privacy obligations equivalent to those in this Policy.

8.1 Active Accounts. We retain your personal data for as long as your ags8 Account remains active. During this period, we maintain records necessary to provide our services, process transactions, and comply with our legal and regulatory obligations.

8.2 Closed Accounts. Following account closure — whether initiated by you or by ags8 — we retain your personal data for a minimum period of five (5) years. This retention period reflects standard anti-money laundering record-keeping requirements applicable to internationally licensed gaming operators.

8.3 KYC Documents. Identity verification documents (KTP copies, proof of address, and selfie photographs) are retained for the duration of the account relationship plus five (5) years following account closure, or such longer period as required by applicable law.

8.4 Transaction Records. Records of all financial transactions — including deposits, withdrawals, and bet history — are retained for a minimum of five (5) years from the date of each transaction.

8.5 Deletion After Retention Period. Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data destruction procedures. Anonymized, aggregated data may be retained indefinitely for statistical analysis.

9.1 ags8 implements a comprehensive, layered security framework to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our key security measures include:

• Transport Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3 with 256-bit SSL certificates. The padlock icon in your browser confirms that your connection to ags8 is encrypted at all times.
• Data at Rest: Personal data stored on our servers is encrypted using AES-256 symmetric encryption — the same standard used by leading financial institutions globally.
• Access Controls: Access to personal data is restricted to authorized ags8 personnel who require it to perform their job functions. All staff with data access undergo background screening and are bound by strict confidentiality obligations.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts for an additional layer of login security.
• Penetration Testing: Our Platform infrastructure undergoes regular third-party penetration testing and security audits to identify and remediate vulnerabilities proactively.
• Incident Response: We maintain a documented data breach response procedure. In the event of a confirmed breach affecting your data, we will notify you within 72 hours of becoming aware of the incident.

9.2 While ags8 takes all reasonable and industry-standard precautions to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and for ensuring that your device and network connection are adequately secured.

10.1 ags8 uses cookies and similar technologies to operate and improve the Platform. The following categories of cookies are in use:

10.2 You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform's core features, but may affect certain personalization functions.

10.3 ags8 does not use third-party advertising cookies or cross-site tracking technologies for the purpose of serving targeted advertisements on external websites.

11.1 As a player on the ags8 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at the details provided in Section 15.

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances — for example, while a rectification request is being reviewed.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests, including the use of your data for direct marketing purposes. We will honor all valid objections promptly.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11.2 We will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

12.1 The ags8 Platform is strictly for adults aged 21 and over. We do not knowingly collect, store, or process personal data belonging to individuals under 21 years of age. Our KYC verification process is designed to identify and prevent underage registration.

12.2 If we discover that personal data has been collected from a person under 21 — whether through misrepresentation during registration or any other means — we will immediately close the associated account, delete the collected data, and return any deposited funds to their source.

12.3 Parents and guardians who believe their child may have registered on the Platform are urged to contact our support team immediately at [email protected]. We treat all such reports as the highest priority.

13.1 The ags8 Platform integrates game content from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers operate their own data processing systems to deliver game functionality. Their data handling practices are governed by their own privacy policies, and ags8 takes contractual steps to ensure they meet appropriate data protection standards.

13.2 Payment processing services from banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) handle transaction data subject to their own privacy and data security frameworks. ags8 shares only the minimum transaction data necessary for payment processing.

13.3 The Platform does not contain links to external third-party websites for marketing or referral purposes. Any external URLs that may appear in support communications are provided solely for informational reference. ags8 is not responsible for the privacy practices of any external website.

14.1 ags8 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform functionality. The "Last Updated" date at the top of this page will be revised to reflect any changes.

14.2 For material changes — those that significantly affect how we collect or use your personal data, or that affect your rights — we will provide at least seven (7) days' advance notice via email to your registered address before the changes take effect.

14.3 Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the revised terms. We encourage you to review this Policy periodically. If you do not agree with any material change, you may close your account before the effective date by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact the ags8 Data Protection team through the following channels:

• Email: [email protected] — subject line: "Privacy Request"
• Live Chat: Available 24/7 via the chat widget on the Platform
• Response Time: Within 4 hours (WIB) for live chat; within 30 days for formal data rights requests submitted by email
• Support Language: English and Bahasa Indonesia

When submitting a data rights request, please include your registered username and the email address associated with your account so we can locate your records promptly and process your request without unnecessary delay.