Definitions
The following definitions apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "air68" / "we" / "us" / "our" | The legal entity operating the air68 platform at air68.cam and any associated subdomains. |
| "Platform" | The air68 website, mobile-optimized interface, and any related software or applications. |
| "Player" / "User" / "you" / "your" | Any individual who accesses, registers on, or interacts with the air68 Platform. |
| "Personal Data" | Any information that directly or indirectly identifies a living individual, including name, date of birth, contact details, payment information, and technical identifiers such as IP address. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, anonymization, and deletion. |
| "Data Controller" | air68, which determines the purposes and means of Processing Personal Data collected through the Platform. |
| "Third-Party Processor" | Any external organization that Processes Personal Data on behalf of and under instruction from air68 (e.g., payment processors, KYC providers). |
| "KYC" | Know Your Customer — the identity and age verification process required under our compliance obligations. |
Scope & Applicability
This Privacy Policy applies to all Personal Data collected by air68 in connection with the operation of the Platform, including data collected from players based in Indonesia and all other jurisdictions in which air68 accepts registrations.
This Policy applies to all channels through which you interact with air68 — including the main website at air68.cam, any mobile-optimized version of the Platform, live chat sessions with our support team, email correspondence, and any promotional or survey communications.
This Policy does not apply to third-party websites or platforms that may be linked to or from the air68 Platform. Those third parties operate under their own independent privacy policies, and air68 accepts no responsibility for their data practices.
By creating an account on air68 or by continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood its contents. This Policy is incorporated by reference into the air68 Terms & Conditions.
Data We Collect
air68 collects Personal Data through several channels and for several distinct purposes. The categories of data we collect are set out below.
3.1 Registration Data
When you create an air68 account, we collect:
- Full legal name
- Date of birth (for age verification — you must be 21 or older)
- Email address
- Mobile phone number
- Preferred currency (Indonesian Rupiah — IDR)
- Chosen username and encrypted password
- City and country of residence
3.2 Identity Verification (KYC) Data
Prior to processing your first withdrawal or upon request for compliance purposes, we may collect:
- Government-issued identification document (Indonesian national ID card / KTP, passport, or driver's license) — including document number, expiry date, and a photograph
- Proof of residential address (utility bill or bank statement dated within 90 days)
- Proof of payment method ownership (e.g., screenshot of BCA, BRI, BNI, or Mandiri bank account showing your name and account number)
- Source of funds declaration where required by our compliance team
3.3 Financial Transaction Data
We record details of all financial transactions on your account, including:
- Deposit amounts, timestamps, and originating payment method (bank account or e-wallet details)
- Withdrawal requests, amounts, processing status, and destination payment method
- Bonus credits, wagering activity related to bonuses, and bonus forfeitures
- Transaction reference numbers assigned by payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, Visa, Mastercard, USDT network)
3.4 Gameplay & Betting Data
- All wager placements, game sessions, bet amounts, outcomes, and winnings across all game types (football betting, live casino, slot games, crash games, and others)
- Game session timestamps and duration
- Responsible gaming tool activations (deposit limits set, self-exclusion requests, session time-out activations)
3.5 Technical & Device Data
- IP address at time of login and during active sessions
- Browser type, version, and language settings
- Device type, operating system, and screen resolution
- Referring URL and exit page
- Session duration and page interaction data
- Cookie identifiers (see Section 7)
3.6 Communications Data
- Content and timestamps of live chat sessions with our support team
- Emails sent to and received from air68 support channels
- Responses to voluntary satisfaction surveys or feedback requests
How We Use Your Data
air68 uses your Personal Data only for the purposes set out below. We do not use personal data for automated decision-making that produces significant legal effects without human review.
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, KYC data |
| Age and identity verification (21+ enforcement) | Date of birth, KYC identity documents |
| Processing deposits and withdrawals | Financial transaction data, KYC data |
| Delivering and improving gaming services | Gameplay data, technical data |
| Customer support and dispute resolution | Communications data, account data, transaction data |
| Fraud detection and AML compliance | All categories, reviewed by compliance team |
| Responsible gaming monitoring and intervention | Gameplay data, self-exclusion records, deposit history |
| Legal and regulatory compliance obligations | KYC data, financial data, account records |
| Platform analytics and performance improvement | Technical data, anonymized gameplay data |
| Sending account-related communications (e.g., transaction confirmations) | Email address, phone number |
Marketing Communications: air68 may send promotional emails or platform notifications about bonuses and events to registered players. You may opt out at any time by contacting our support team or by following the unsubscribe instruction in any promotional email. Opting out of marketing does not affect transactional communications related to your account.
Legal Basis for Processing
air68 processes your Personal Data on the following legal bases depending on the category of data and purpose of processing:
- Contractual necessity: Processing required to enter into and perform the player account agreement, including account registration, payment processing, and game delivery.
- Legal obligation: Processing required to comply with applicable anti-money laundering (AML), know-your-customer (KYC), and international gaming regulatory requirements.
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, analytics, and improvement of the gaming service — where these interests are not overridden by your rights and freedoms.
- Consent: Processing for marketing and promotional communications, where you have provided a clear affirmative opt-in. Consent may be withdrawn at any time without affecting prior lawful processing.
Data Sharing & Third-Party Disclosure
air68 does not sell your Personal Data. We share data with third parties only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.
6.1 Payment Processors
To process deposits and withdrawals, air68 shares relevant financial and identity data with its payment processing partners. In the Indonesian market, these include the banking rails of BCA, BRI, BNI, Bank Mandiri, CIMB Niaga, Bank Permata, BSI, and OCBC NISP, and the e-wallet networks of OVO, DANA, GoPay, ShopeePay, and LinkAja, and international card networks Visa and Mastercard. Each processor is bound by its own published data protection terms, and air68 selects partners that operate to appropriate security standards.
6.2 Identity Verification (KYC) Providers
air68 uses third-party KYC service providers to automate portions of the identity and age verification process. These providers receive only the documentation and personal information necessary to complete verification and are contractually prohibited from using your data for any other purpose.
6.3 Game Content Providers
Game studios that supply content to the air68 Platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may receive anonymized or pseudonymized session data for the purpose of game performance monitoring, RNG certification, and compliance auditing. No directly identifying data (name, contact details, payment information) is shared with game studios.
6.4 Regulatory & Law Enforcement Authorities
air68 may disclose Personal Data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, by lawful order, or where we reasonably believe disclosure is necessary to prevent fraud, money laundering, or serious harm. We will notify you of such disclosures where legally permitted to do so.
6.5 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of the air68 business, Player data may be transferred as part of that transaction. You will be notified of any such transfer and of any material change to data processing practices that results from it, with a reasonable opportunity to close your account before the change takes effect.
Cookies & Tracking Technologies
air68 uses cookies and similar local storage technologies to operate the Platform, maintain your login session, and collect anonymized analytics data. The categories of cookies used are:
- Essential cookies: Required for the Platform to function. These maintain your authenticated session, store language and display preferences, and enable core security features. They cannot be disabled without impairing the Platform's functionality.
- Analytics cookies: Used to collect anonymized data about how players navigate the Platform — pages visited, features used, session duration, and device type. This data is aggregated and used to improve the Platform experience. No personally identifying information is stored in analytics cookies.
- Responsible gaming cookies: Store your self-set deposit limits and session time preferences locally on your device for rapid enforcement. These do not contain personally identifying data.
air68 does not use third-party advertising cookies or cross-site tracking technologies. You may manage cookie settings through your browser. Disabling essential cookies will prevent login and core Platform functions.
Data Retention
air68 retains Personal Data for the periods set out below. Where retention is driven by a legal obligation, the period reflects the minimum required by the applicable regulatory framework.
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus 5 years following closure |
| KYC identity documents | 5 years from date of verification (AML compliance requirement) |
| Financial transaction records | 5 years from transaction date |
| Gameplay and betting history | 3 years from last active session |
| Support communications | 3 years from closure of the relevant support ticket |
| Self-exclusion records | Permanent — required for responsible gaming enforcement |
| Marketing consent records | Until consent is withdrawn, plus 1 year as consent evidence |
| Technical / server log data | 90 days (rolling) for security monitoring purposes |
Upon expiry of the applicable retention period, Personal Data is either permanently deleted from all storage systems or anonymized such that re-identification is not technically feasible.
Your Data Rights
As a Player on the air68 Platform, you hold the following rights with respect to your Personal Data. These rights may be exercised by submitting a written request to our support team at the contact details in Section 14.
Right of Access
Request a copy of all Personal Data air68 holds about you, free of charge, within 30 days of your request.
Right to Rectification
Request correction of inaccurate or incomplete Personal Data without undue delay.
Right to Erasure
Request deletion of your Personal Data where it is no longer required for the original purpose or where you withdraw consent — subject to legal retention obligations.
Right to Restrict Processing
Request that air68 suspends use of your data while an accuracy dispute or objection is being reviewed.
Right to Portability
Request a structured, machine-readable export of the Personal Data you have provided to air68 (e.g., account registration information, transaction history).
Right to Object
Object to processing of your data for marketing purposes at any time. You may also object to processing based on legitimate interests, subject to assessment of the specific circumstances.
Children & Minors
The air68 Platform is strictly intended for adults aged 21 years and older. air68 does not knowingly collect Personal Data from any individual under the age of 21. Age verification is performed on all accounts at the KYC stage.
If air68 becomes aware that Personal Data has been collected from an individual under the age of 21, that account will be immediately suspended, all funds returned to the originating payment method, and all associated data deleted within 30 days of discovery.
Parents and guardians who believe that a minor under their care has created an account on the air68 Platform should contact our support team immediately with relevant documentation.
Data Security
air68 implements a layered security architecture to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Our security measures include:
- Transport security: All data transmitted between your device and our servers is encrypted using TLS 1.3 with 256-bit AES encryption. HTTP connections are automatically redirected to HTTPS.
- Storage security: Personal Data and financial records are stored on encrypted servers. Sensitive fields (passwords, payment credentials) are hashed or tokenized and are never stored in plaintext.
- Access controls: Internal access to player Personal Data is restricted on a strict need-to-know basis. All internal access is logged and periodically audited. No single staff member has unrestricted access to the full data set.
- Incident response: air68 maintains a documented data breach response procedure. In the event of a breach affecting your Personal Data, you will be notified within 72 hours of our discovery, together with a description of the data affected, the likely consequences, and the measures we have taken to address the incident.
- Third-party audits: Our security infrastructure is subject to periodic independent security assessments.
Despite our comprehensive security measures, no internet transmission or electronic storage system is 100% secure. We encourage you to use a strong, unique password for your air68 account and to enable any two-factor authentication features available on the Platform. Never share your login credentials with anyone — air68 staff will never ask for your password.
International Data Transfers
air68 operates as an international offshore gaming platform. Your Personal Data may be processed on servers located outside of Indonesia. Specifically, data may be stored or processed in the jurisdiction in which air68 holds its gaming license, and by third-party processors (payment providers, KYC vendors, game studios) whose infrastructure is located in various countries.
Where Personal Data is transferred outside your country of residence, air68 ensures that appropriate safeguards are in place, including contractual data protection agreements with receiving parties that require equivalent standards of protection to those described in this Policy.
Indonesian players should be aware that Indonesia's Personal Data Protection Law (UU Perlindungan Data Pribadi, enacted 2022) governs the processing of personal data of Indonesian residents. air68 operates its data practices with awareness of this legislative framework and applies data protection principles consistent with its requirements.
Policy Amendments
air68 reserves the right to update or revise this Privacy Policy at any time. Material changes — meaning changes that affect how we collect, use, or share your Personal Data in ways that are meaningfully different from current practices — will be communicated to registered players by email at least 14 days before the change takes effect.
Non-material updates (such as clarifications of existing practices, typographic corrections, or formatting changes) may be published without advance notice. The "Last Updated" date at the top of this Policy will always reflect the most recent revision.
Your continued use of the air68 Platform following the effective date of any amendment constitutes your acknowledgment of the updated Policy. If you do not accept a material amendment, you have the right to close your account and withdraw your balance before the change takes effect.
Contact & Complaints
For all data privacy enquiries, requests to exercise your rights under Section 9, or complaints about how air68 handles your Personal Data, please contact our support team using the details below. All data privacy requests should be submitted in writing and will be acknowledged within 5 business days.
Data Privacy Enquiries — Email (plain text, not a link):
[email protected]
Subject line: Please use "Privacy Request — [Your Username]" as the subject line for all data privacy correspondence to ensure routing to the correct team.
Response Commitment: Data access and portability requests are fulfilled within 30 calendar days. Erasure requests are processed within 30 calendar days, subject to applicable legal retention obligations. Objection and restriction requests are assessed within 14 calendar days.
Live Chat: Available 24/7 via the Platform for general privacy questions. Indonesian-speaking agents are available at all hours.
If you are not satisfied with air68's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction applicable to your residence. Indonesian residents may refer to the Ministry of Communication and Information Technology (Kementerian Komunikasi dan Informatika) for domestic data protection guidance.