Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") describes how ayubet ("we", "us", "our") collects, processes, stores, and shares the personal data of individuals ("you", "your") who use the ayubet online gaming platform accessible at ayubet.cam ("Platform").

This Policy applies to all users of the Platform, including registered Players, prospective players who browse the Platform without creating an account, and individuals who contact our customer support team. It covers all personal data processed by ayubet regardless of the device, browser, or application used to access the Platform.

By registering an account with ayubet or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and, if applicable, close your account.

This Policy should be read alongside the ayubet Terms & Conditions, which govern the broader contractual relationship between you and ayubet.

2 Definitions

• "Personal Data" means any information that directly identifies, or that could reasonably be used to identify, a natural person — including name, email address, device identifier, and IP address.
• "Sensitive Personal Data" means a subset of Personal Data that warrants enhanced protection, including government-issued identification numbers (such as Indonesian KTP numbers), biometric data, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, ayubet.
• "Data Processor" means a third party that processes Personal Data on behalf of ayubet under a written data processing agreement.
• "Data Subject" means the identified or identifiable natural person to whom Personal Data relates — in this context, you as a Player or Platform user.
• "DPO" means Data Protection Officer, the individual responsible for overseeing ayubet's data-protection compliance.
• "KYC" means Know Your Customer — the identity and age verification process mandated prior to a Player's first withdrawal.
• "AML" means Anti-Money Laundering — the regulatory framework and internal controls through which ayubet prevents financial crime.
• "Cookie" means a small text file placed on your device by the Platform for session management, fraud detection, or analytical purposes.

3 Personal Data We Collect

ayubet collects the following categories of personal data in the ordinary course of operating the Platform:

4 How We Collect Your Data

ayubet collects personal data through the following channels:

• Direct Submission: Data you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal, submitting a support enquiry, or updating your account profile.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, device identifiers, session cookies, and behavioural analytics generated by your interaction with our games and betting interfaces.
• Third-Party KYC Providers: During identity verification, our authorised KYC partners may retrieve supplemental identity confirmation data from government databases or credit reference agencies to cross-check the information you have provided.
• Payment Processors: When you deposit or withdraw funds using local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP) or e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), our payment processors share transaction reference data with us to confirm successful fund movement.
• Fraud Prevention Partners: Our fraud-detection systems may enrich device and IP data with risk-scoring signals from third-party fraud intelligence providers to identify unusual account activity.
• Cookies and Tracking Technologies: The Platform uses cookies, web beacons, and local storage to maintain your session, remember preferences, and collect aggregated analytical data. See Clause 9 for full details.

5 Purpose & Legal Basis for Processing

ayubet processes your personal data for the following specific purposes, each supported by a corresponding legal basis:

Where processing is based on your consent (for example, receiving promotional communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, update your communication preferences in your account settings or contact our support team.

6 Data Sharing & Third-Party Disclosure

ayubet does not sell, rent, or otherwise commercially transfer your personal data to third parties. We share your data only in the following limited and controlled circumstances:

• Payment Processors: We share your name, bank account or e-wallet details, and transaction amounts with authorised payment partners to facilitate deposits and withdrawals. These partners are bound by strict data processing agreements and are prohibited from using your data for any purpose other than completing the relevant transaction.
• KYC and Identity Verification Providers: We share your identity documents and personal details with certified KYC verification partners for age and identity confirmation purposes. These partners operate under contractual confidentiality obligations.
• Fraud Prevention and AML Services: We may share Technical Data and transaction patterns with fraud-intelligence providers and financial crime compliance systems to detect and prevent money laundering, account takeover, and bonus abuse.
• Regulatory Authorities: We may disclose personal data to competent regulatory authorities, law enforcement bodies, or courts where we are legally required to do so. Where permitted by law, we will notify you of such disclosure.
• Group Companies: Where ayubet operates under a parent company or as part of a licensed gaming group, personal data may be shared with group entities for the purpose of consolidated AML compliance, risk management, and responsible gaming monitoring. All group entities are bound by equivalent data protection standards.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of ayubet's business, your personal data may be transferred to the successor entity. You will be notified in advance of any such transfer and of any material change to how your data will be processed.

7 International Data Transfers

The ayubet Platform serves players primarily based in Indonesia, with the majority of our players located across Jakarta, Surabaya, Medan, Bandung, Bali, Semarang, and other major Indonesian cities. Our core infrastructure is hosted on servers located within the region; however, certain service providers and processing systems may be based in other jurisdictions.

Where personal data is transferred outside Indonesia to a third-party processor in a different country, ayubet ensures that appropriate safeguards are in place, including:

• Standard contractual clauses that impose equivalent data-protection obligations on the receiving party;
• Transfer only to processors in jurisdictions that have been assessed as providing an adequate level of data protection;
• Binding corporate rules where data is transferred within a corporate group.

By using the Platform, you acknowledge and consent to the transfer of your personal data to countries outside Indonesia where necessary for the purposes described in this Policy, on the basis that adequate safeguards are in place as described above.

8 Data Retention

ayubet retains your personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active Account Data: Retained for the full duration of your ayubet account, plus a minimum of five (5) years following account closure, to meet AML record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission, in line with international AML standards and any applicable local regulatory requirements.
• Transaction Records: All deposit and withdrawal records are retained for a minimum of five (5) years following each transaction date.
• Customer Support Communications: Live chat transcripts, email threads, and support tickets are retained for three (3) years from the date of the interaction.
• Technical and Usage Data: IP logs and session data are retained for twelve (12) months and then anonymised for analytical use.
• Marketing Consent Records: Records of your opt-in consent to receive promotional communications are retained for as long as your account is active plus two (2) years following account closure or consent withdrawal, whichever is later.
• Responsible Gaming Records: Self-exclusion and limit-setting records are retained for the duration of the exclusion period plus five (5) years, to ensure that previously excluded Players are not inadvertently re-onboarded.

Once the applicable retention period has elapsed and there is no ongoing legal basis for continued storage, your personal data will be securely deleted or irreversibly anonymised in accordance with our internal data destruction procedures.

9 Cookies & Tracking Technologies

The ayubet Platform uses cookies and similar technologies to deliver a functional, secure, and personalised experience. We use the following categories of cookies:

ayubet does not use third-party advertising cookies, social media tracking pixels, or cross-site behavioural profiling technologies. You may manage or delete cookies through your browser settings at any time; however, disabling strictly necessary cookies will impair your ability to log in and use the Platform.

10 Data Security

ayubet applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or destruction. Our security framework includes:

• Transport Layer Security (TLS 1.3): All data in transit between your device and our servers is encrypted using industry-standard TLS 1.3 protocols.
• AES-256 Encryption at Rest: All personal and financial data stored on our servers is encrypted using AES-256 symmetric encryption.
• Role-Based Access Controls (RBAC): Access to personal data is restricted to authorised personnel on a strict need-to-know basis. Access rights are reviewed quarterly.
• Two-Factor Authentication (2FA): All internal administrative systems require multi-factor authentication. We also offer 2FA to Players as an optional account security feature.
• Regular Penetration Testing: Our Platform undergoes independent security audits and penetration tests at least twice annually to identify and remediate potential vulnerabilities.
• Intrusion Detection Systems: Automated monitoring systems are in place 24 hours a day (WIB) to detect and respond to anomalous access patterns or potential data breaches.
• Data Breach Response: In the event of a confirmed personal data breach that poses a risk to your rights or freedoms, ayubet will notify affected users within 72 hours of becoming aware of the breach and will take all necessary remediation steps.

11 Your Data Rights

As a Data Subject, you have the following rights in relation to your personal data held by ayubet. To exercise any of these rights, contact our Data Protection Officer at [email protected]. We will acknowledge your request within 5 business days and aim to resolve it within 30 calendar days.

12 Children's Privacy

The ayubet Platform is strictly intended for adults who are 21 years of age or older. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 21.

If we discover or are notified that an account has been registered by a person under 21, we will immediately:

• Suspend and permanently close the account;
• Void all wagers placed and any winnings derived from those wagers;
• Return any verifiable Real-Money deposits to the source payment account;
• Securely delete all personal data associated with the account, subject to any overriding legal retention obligations.

If you believe that a minor has registered an account with ayubet, please notify us immediately at [email protected] so that we can take prompt action.

13 Marketing Communications

With your explicit consent, ayubet may send you promotional communications about bonus offers, new game launches, seasonal promotions (including events aligned with Indonesian public holidays such as Idul Fitri, Nyepi, and Indonesian Independence Day), and special VIP rewards.

We may use the following channels for marketing communications where you have opted in:

• Email to your registered email address
• SMS to your registered Indonesian mobile number
• In-platform notifications within the ayubet interface
• WhatsApp and Telegram (where you have voluntarily initiated contact via these channels)

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any marketing email;
• Updating your notification preferences in your ayubet account settings; or
• Contacting our support team via live chat or email at [email protected] and requesting removal from all marketing lists.

Withdrawal of marketing consent will not affect the delivery of transactional communications — such as deposit confirmations, withdrawal status updates, and account security alerts — which are sent on the basis of contractual necessity and cannot be opted out of while your account remains active.

14 Third-Party Links

The ayubet Platform may contain references to third-party payment providers, game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft), and sports data providers. While these integrations are necessary to deliver our full range of services, ayubet is not responsible for the privacy practices of third-party organisations.

Each third-party service provider maintains its own privacy policy. We strongly encourage you to review the privacy documentation of any third-party service you interact with directly. ayubet's Privacy Policy applies exclusively to data processed by ayubet itself as Data Controller.

15 Policy Amendments

ayubet reserves the right to update this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or regulatory guidance. When we make material changes — those that significantly affect your rights or how your data is used — we will:

• Update the "Last Updated" date prominently displayed at the top of this page;
• Send a notification to your registered email address at least 14 days before the revised Policy takes effect; and
• Display a prominent in-platform notice on your next login.

For minor, non-material amendments (such as typographical corrections or clarifications that do not alter the substance of our commitments), we will update the Policy without prior notice, though the "Last Updated" date will always reflect the most recent revision.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the updated terms, you must close your account before the effective date and withdraw any remaining balance.

16 Contact & Data Protection Officer

If you have any questions, concerns, or complaints about this Privacy Policy or about how ayubet handles your personal data, please contact our Data Protection Officer through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the live chat widget on the Platform
• WhatsApp & Telegram: Contact details are provided within the Platform's support section

Our support team operates in both English and Bahasa Indonesia, 24 hours a day (WIB), 365 days a year — including during all Indonesian public holidays. Our average first-response time is under 2 minutes via live chat and under 4 hours via email.

If you believe that ayubet has not adequately addressed your data-protection concern, you have the right to escalate the matter to the relevant data-protection supervisory authority in your jurisdiction.