Privacy Policy

This Privacy Policy ("Policy") describes how ave189 ("we", "us", "our", or "the Platform") collects, processes, stores, shares, and protects the personal data of individuals ("you", "the Player") who visit, register on, or otherwise interact with the ave189 platform accessible at ave189.bio.

This Policy applies to all personal data processed in connection with your use of ave189's online casino, sportsbook, live dealer, and slot game services, as well as any related mobile interfaces, customer support channels, email communications, and promotional activities.

ave189 primarily serves players based in Indonesia. Our data practices are designed to be consistent with internationally recognised privacy principles, including those relevant to the Indonesian market. By registering an Account or continuing to use the ave189 Platform after this Policy becomes effective, you acknowledge that you have read, understood, and agree to the collection and use of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions, which govern the overall relationship between you and ave189.

ave189 acts as the data controller in respect of the personal data it collects from Players and website visitors. As the data controller, ave189 determines the purposes and means of processing your personal data in connection with the operation of the Platform.

Where ave189 engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification providers, or fraud detection services), those providers act as data processors under contractual terms that require them to process data only on ave189's instructions and in compliance with applicable data protection obligations.

If you have questions about how your data is handled, or if you wish to exercise any of the rights described in Section 11, you may contact our Data Protection contact at: [email protected].

ave189 collects several categories of personal data, depending on how you interact with the Platform. The table below summarises the main categories and specific data points collected.

ave189 collects personal data through the following primary channels:

• Directly from You: When you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, use live chat or email support, or respond to a promotional offer.
• Automatically via Technology: When you visit or use the Platform, our servers and analytics tools automatically record technical and device data, including your IP address, browser characteristics, pages visited, and session duration. Cookies and similar tracking technologies are described in Section 8.
• From Third-Party Verification Services: Our KYC and identity verification partners may provide enriched data points (e.g., address confirmation, document authenticity signals) derived from their own databases in connection with your verification request.
• From Payment Processors: When you make a deposit or withdrawal, payment service providers (banks, e-wallet operators) transmit transaction confirmation data, including transaction reference numbers and timestamps, back to ave189.
• From Fraud Prevention Services: ave189 uses specialist third-party fraud and AML (anti-money-laundering) screening tools that may provide risk signals associated with IP addresses, device fingerprints, or financial transaction patterns.

ave189 processes personal data for the following clearly defined purposes:

• Account Creation & Management: To register your Account, verify your identity, authenticate your login sessions, manage your account settings, and communicate essential account information to you.
• Transaction Processing: To process deposits and withdrawals via your chosen Indonesian payment method, to record your transaction history, and to resolve any payment disputes or queries.
• Regulatory Compliance & KYC: To fulfil our obligations under applicable anti-money-laundering, counter-terrorism-financing, and responsible gaming regulations, including verifying your age (21+), identity, and source of funds.
• Platform Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, multi-accounting, unauthorised access, and other prohibited conduct.
• Game Fairness & Integrity: To monitor game play patterns for signs of collusion, cheating, or exploitation of software vulnerabilities, and to maintain the fairness and integrity of all games offered on the Platform.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance via live chat or email.
• Responsible Gaming: To monitor your gaming behaviour for indicators of problem gambling, to enforce deposit limits and self-exclusion requests you have set, and to send responsible gaming reminders where appropriate.
• Marketing & Promotions: Where you have opted in, to send you information about ave189 promotions, bonuses, seasonal offers (such as Idul Fitri or Indonesian Independence Day specials), and new game releases. You may opt out at any time.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how Players use the Platform, identify areas for improvement, optimise the user interface, and develop new features.
• Legal Claims: To establish, exercise, or defend legal claims, comply with court orders, and respond to requests from competent regulatory or law enforcement authorities.

ave189 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between you and ave189 — including account creation, transaction processing, customer support, and game provision — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
• Legal Obligation: Processing required to comply with applicable law, including KYC, AML, age verification, and responsible gaming obligations, is carried out on the basis of legal compliance.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and platform improvement is based on ave189's legitimate interest in operating a safe, fair, and sustainable gambling platform, provided those interests are not overridden by your rights and freedoms.
• Consent: Processing of your data for direct marketing and optional promotional communications is based solely on your freely given consent. You may withdraw this consent at any time through your Account settings or by contacting support, without affecting the lawfulness of processing carried out prior to withdrawal.

ave189 does not sell your personal data to any third party. We share personal data only in the following limited circumstances:

• Payment Processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja receive the minimum data necessary to process your deposit or withdrawal transaction. These providers operate under their own privacy policies and applicable Indonesian banking regulations.
• KYC & Identity Verification Partners: Third-party identity verification services receive your KYC documents and registration data solely for the purpose of verifying your identity and age. These partners are contractually bound to process data only for the specified verification purpose and to maintain appropriate security standards.
• Fraud & AML Screening Services: Specialist compliance and fraud prevention vendors may receive technical and transactional data to perform automated risk scoring and AML screening. They act solely as data processors under our instructions.
• Game Studios: Licensed game providers (including Evolution Gaming, Pragmatic Play, PG Soft, Spribe, and others) may receive the minimum necessary session data to facilitate game delivery and resolve game-related disputes. Game studios are not permitted to use this data for their own marketing purposes.
• Regulatory & Law Enforcement Authorities: ave189 will disclose personal data to competent authorities where required by law, court order, or regulatory direction. We will notify you of such disclosure unless prohibited by law from doing so.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or asset sale involving ave189, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and any changes to this Policy that arise from it.

ave189 uses cookies and similar tracking technologies to operate the Platform effectively, ensure security, and improve your experience. The following types of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They manage your authenticated session, maintain your login state, remember your language preferences, and protect against cross-site request forgery (CSRF). These cookies cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised data about how Players use the Platform — which pages are visited most frequently, where Players spend the most time, and which features generate the most engagement. This data is used solely to improve the Platform.
• Functional Cookies: These cookies remember your preferences and customisations — such as your preferred game category, saved payment method (non-sensitive identifier only), and responsible gaming settings — so you do not need to re-enter them on every visit.
• Security & Fraud Prevention Cookies: These cookies assist in identifying suspicious access patterns, detecting bot activity, and flagging unusual login behaviour. They are a core component of ave189's account security infrastructure.

Most browsers allow you to control cookies through their settings. Blocking strictly necessary cookies will impair or prevent your ability to use the Platform. Blocking performance or functional cookies will not prevent access but may affect your experience. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

ave189 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or operational obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymised data is retained for statistical or analytical purposes, it no longer constitutes personal data and falls outside the scope of this Policy.

ave189 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-Bit SSL Encryption: All data transmitted between your browser or device and the ave189 servers is protected by industry-standard 256-bit TLS/SSL encryption. This applies to all sessions, login events, transactions, and support interactions.
• Encrypted Data Storage: Sensitive personal data — including KYC documents, financial records, and hashed passwords — is stored in encrypted form on secure servers with restricted physical and logical access controls.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. ave189 staff are granted access only to the data categories necessary to perform their specific job functions. All access events are logged and audited.
• Password Security: User passwords are stored using a one-way cryptographic hashing algorithm with salt. Plain-text passwords are never stored or transmitted by ave189. ave189 will never ask you to disclose your password via any channel.
• Device & Session Monitoring: ave189 employs device recognition and session anomaly detection systems that flag unusual login patterns (e.g., access from a new device, a new IP address, or an unexpected geographic location) and trigger additional verification steps.
• Vendor Security Standards: Third-party data processors (payment processors, KYC providers, game studios) are required to maintain security standards commensurate with ave189's own standards as a condition of their service agreements.
• Incident Response: ave189 maintains a documented data breach response procedure. In the event of a security incident that poses a material risk to your personal data, ave189 will notify affected Players and, where required, relevant authorities, within a reasonable timeframe.

As a Player on the ave189 Platform, you have the following rights in respect of your personal data. To exercise any of these rights, contact our support team at [email protected] or via live chat. ave189 will respond to all verifiable rights requests within 30 days.

Please note that certain rights may be limited where ave189 is required by law to retain or process specific data, or where exercising a right would conflict with our AML, KYC, or responsible gaming obligations. In such cases, ave189 will explain the limitation clearly in its response to your request.

ave189 is strictly an adult-only platform. The minimum age to register and use the Platform is 21 years. ave189 does not knowingly collect personal data from any person under the age of 21.

Age verification is conducted as part of the registration and KYC process. Where ave189 identifies or reasonably suspects that an Account belongs to a person under 21, the Account will be immediately suspended, all winnings will be forfeited, and the Account will be permanently closed. Original deposit amounts may be returned to the verified source payment method at ave189's discretion following a review.

If you are a parent or guardian and believe that a person under 21 in your care has registered an Account on ave189, please contact us immediately at [email protected]. We will investigate and take appropriate action promptly. We also recommend using parental control software to prevent underage access to online gambling platforms. For further guidance, visit our Responsible Gaming page.

The ave189 Platform may contain references to third-party brands, payment providers, and game studios. Where the Platform links to or integrates with third-party services — such as bank portals (BCA, BRI, BNI, Mandiri), e-wallet applications (OVO, DANA, GoPay, ShopeePay, LinkAja), or game studio environments — those third parties operate under their own privacy policies and data practices, which are entirely independent of this Policy.

ave189 has no control over, and accepts no responsibility for, the privacy practices of any third-party service. We encourage you to review the privacy policy of any third-party service you interact with in connection with your use of ave189 — particularly your bank's or e-wallet provider's data policy when initiating payment transactions.

ave189 does not endorse or make any representation about the privacy practices of any third party. The inclusion of a payment method or game studio name on the Platform does not imply any partnership, endorsement, or privacy guarantee beyond the data processing agreements described in Section 7.

ave189 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, operational practices, or Platform features. When material changes are made, ave189 will:

• Update the "Last Updated" date displayed at the top of this page.
• Post a prominent notice on the ave189 homepage for a minimum of 7 days following the effective date of the amended Policy.
• Where the changes materially affect how we process your personal data, send an email notification to all registered Players summarising the key changes prior to the effective date.

Your continued use of the ave189 Platform after the effective date of any amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should stop using the Platform and contact support to arrange account closure and withdrawal of any available balance.

We recommend that you review this Privacy Policy periodically to stay informed about how ave189 handles your personal data. The most current version of this Policy is always available at ave189.bio/privacy-policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which ave189 processes your personal data, please reach out through any of the following channels:

• Live Chat: Available 24/7 directly on the ave189 Platform. For privacy-related enquiries, please indicate the nature of your request (e.g., "data access request", "deletion request", "privacy concern") at the start of the chat so our agents can route your query to the appropriate team.
• Email: [email protected] — email is monitored around the clock; responses to privacy-related requests are typically delivered within 2 business hours for general queries and within 30 days for formal rights requests.

ave189 support agents are fluent in Indonesian and able to assist with privacy queries in both English and Bahasa Indonesia. When contacting support regarding a privacy matter, please include your registered username and Account ID to allow the team to locate your records efficiently.

If you are not satisfied with ave189's response to your privacy complaint, or if you believe that your data rights have been violated, you have the right to escalate your complaint to a relevant supervisory authority or seek independent legal advice in your jurisdiction.