Privacy Policy

1. Overview

This Privacy Policy describes how aifa66 ("we", "us", "our", or the "Platform") collects, processes, stores, and protects personal information provided by users ("you", "your", or "Player") when you access or use the aifa66 online gaming platform at aifa66.cam and all associated services.

We are committed to handling your personal data responsibly, transparently, and in accordance with applicable international data protection standards. This policy applies to all personal data collected through account registration, gameplay, customer support interactions, payment processing, and any other point of contact between you and aifa66.

By creating an account on aifa66 or continuing to use our services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your data as described herein. If you do not agree with any provision of this policy, please discontinue using the platform and contact our support team to request account closure.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that directly or indirectly identifies a natural person, including name, email address, phone number, identity document number, IP address, and payment details.
• "Processing" — any operation or set of operations performed on personal data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" — aifa66, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — any third-party service provider (e.g., payment gateway, KYC verification vendor, cloud hosting provider) that processes personal data on behalf of aifa66 under a written data processing agreement.
• "Sensitive Data" — a subset of personal data requiring enhanced protection, including but not limited to copies of government-issued identity documents, biometric data, and financial account information.
• "Cookies" — small text files placed on your device by the aifa66 platform to store session-related information, preferences, and anonymized analytics data.
• "KYC" — Know Your Customer; the mandatory identity verification process required by aifa66 to confirm your identity, age, and eligibility before permitting withdrawals or other high-trust actions.

3. Data We Collect

aifa66 collects personal data through several distinct channels. The categories of data collected depend on how you interact with the platform.

3.1 Account Registration Data

When you create an account on aifa66, we collect the following mandatory information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify that you meet the 21+ age requirement)
• Gender (optional, used for demographic analytics)
• Email address (primary communication channel)
• Mobile phone number (used for 2FA and account recovery)
• Residential address, including city and province within Indonesia
• Preferred username and encrypted password

3.2 KYC Verification Documents

Before processing your first withdrawal, we require identity verification documents including:

• A clear photograph of your Indonesian national identity card (KTP) or other valid government-issued photo identification
• A recent proof-of-address document (utility bill, bank statement, or government letter dated within the last three months)
• A live selfie photograph holding your ID card beside your face

KYC documents are treated as sensitive data. They are stored in encrypted form, accessible only to trained compliance personnel, and are never used for any purpose other than identity verification and regulatory compliance.

3.3 Financial Transaction Data

When you make deposits or request withdrawals, we collect and retain:

• Payment method type (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay)
• Bank account number or e-wallet identifier associated with the transaction
• Transaction amounts, timestamps, and unique reference numbers
• Transaction status and processing notes

aifa66 does not store full credit or debit card numbers. All payment processing is handled by PCI DSS-compliant third-party payment processors.

3.4 Gameplay and Behavioral Data

We collect anonymized and pseudonymized data about your interactions with the platform, including:

• Games played, bet amounts, win/loss records, and session durations
• Bonus claims, wagering progress, and loyalty program activity
• Pages visited, features used, and navigation patterns within the platform
• Device type, operating system, browser version, and screen resolution
• IP address and approximate geographic location (city-level only, derived from IP)

This data is used to improve platform performance, detect fraudulent activity, tailor promotional offers, and comply with responsible gaming obligations.

3.5 Customer Support Communications

When you contact aifa66 customer support via live chat or email, we retain records of those communications including the content of messages, timestamps, and any supporting screenshots or attachments you provide. These records are used to resolve your query, improve service quality through review, and maintain an accurate history of your account interactions.

3.6 Data Collected Automatically

Certain technical data is collected automatically when you access the platform, including:

• IP address and internet service provider (ISP)
• Referring URL (the website or link you came from before visiting aifa66)
• Session start and end timestamps
• Cookie identifiers and locally stored preferences

4. How We Use Your Data

aifa66 uses the personal data we collect for the following specific purposes:

4.1 Account Management and Service Delivery

Your registration data is used to create and maintain your account, authenticate your identity at login, process your deposits and withdrawals, and provide you with uninterrupted access to all platform features. Without this data, we cannot provide the services you signed up for.

4.2 Identity Verification and Regulatory Compliance

KYC verification documents and financial transaction records are processed to fulfill our obligations under applicable international anti-money laundering (AML) regulations and to verify that all members meet the 21+ age requirement. Compliance with these obligations is a legal necessity and cannot be waived.

4.3 Fraud Detection and Platform Security

Gameplay data, IP address logs, device fingerprints, and transaction records are analyzed by our automated fraud detection systems and security team to identify unauthorized access, multi-accounting, bonus abuse, collusion, and other prohibited activities. This processing is essential to protect the integrity of the platform and the financial safety of all members.

4.4 Responsible Gaming Monitoring

Behavioral and gameplay data is reviewed by our responsible gaming team to identify patterns that may indicate problem gambling — such as extended session durations, rapidly escalating bet sizes, or unusual withdrawal activity following significant losses. This data is used proactively to reach out to at-risk players and offer support tools. See our Responsible Gaming page for full details on the tools and resources available to you.

4.5 Customer Support

Support communication records are used to resolve your queries, train support staff, and maintain an accurate account history. We may also use anonymized support interaction data in aggregate to identify common issues and improve platform documentation.

4.6 Personalization and Promotions

With your consent, we may use gameplay preferences, game history, and deposit patterns to personalize the promotions and bonus offers displayed to you. You may withdraw consent for personalized marketing at any time by contacting our support team or updating your communication preferences in your account settings. Withdrawal of marketing consent does not affect your right to receive transactional communications (e.g., deposit confirmations, withdrawal receipts, security alerts).

4.7 Platform Analytics and Improvement

Aggregated, anonymized behavioral and technical data is analyzed to understand how players use the platform, identify underperforming features, and prioritize product development. This analysis does not involve personal identification and is used solely to improve the aifa66 experience for all members.

5. Legal Basis for Processing

aifa66 processes your personal data on the following leg al grounds:

• Contractual Necessity: Processing your registration data, KYC documents, and financial transaction records is required to fulfill our contractual obligations to you as a registered member of aifa66.
• Legal Obligation: Processing for AML compliance, age verification, and regulatory reporting is mandated by applicable international gaming and financial regulations. We cannot waive these obligations.
• Legitimate Interests: Processing for fraud detection, platform security, responsible gaming monitoring, and aggregate analytics serves our legitimate business interest in maintaining a safe, fair, and sustainable platform for all members.
• Consent: Processing for personalized marketing communications is based on your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Data Sharing and Disclosure

aifa66 does not sell, rent, or trade your personal data to any third party for their independent commercial purposes. We share your data only in the limited circumstances described below.

6.1 Service Providers and Data Processors

We engage carefully vetted third-party service providers to assist in delivering our services. These providers act as data processors under written agreements and are permitted to use your data only to perform the specific services contracted. Current categories of data processors include:

• Payment processors: Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) who facilitate your deposits and withdrawals.
• KYC verification vendors: Independent identity verification providers who process your ID documents and selfie photographs to confirm your identity and age.
• Cloud infrastructure providers: Secure, ISO 27001-certified hosting providers on whose servers your data is stored and processed.
• Game content studios: Third-party game providers (e.g., Pragmatic Play, Evolution Gaming, Microgaming, NetEnt) receive anonymized session identifiers necessary to deliver their game content. These providers do not receive your name, contact details, or payment information.
• Fraud prevention services: Specialized providers whose tools assist in detecting multi-accounting, bot usage, and other prohibited activities using technical signals such as device fingerprints and IP reputation data.

6.2 Regulatory and Law Enforcement Disclosure

aifa66 may be required by applicable law, court order, or regulatory directive to disclose personal data to government authorities, law enforcement agencies, or financial regulators. We will comply with all lawfully issued requests and will notify you of any such disclosure where we are legally permitted to do so.

6.3 Business Transfers

In the event that aifa66 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected users via email prior to any such transfer, and the receiving entity will be required to honor the commitments made in this Privacy Policy.

6.4 Protection of Rights

We may disclose personal data when we believe in good faith that disclosure is necessary to protect the legal rights, property, or safety of aifa66, its members, or the general public — for example, in connection with investigations of fraud, cheating, or other prohibited conduct on the platform.

7. Cookies and Tracking Technologies

aifa66 uses cookies and similar technologies to operate the platform, remember your preferences, and collect anonymized usage analytics. We do not use third-party advertising cookies or cross-site behavioral tracking.

7.1 Types of Cookies We Use

• Essential Cookies: Required for the platform to function. These cookies maintain your login session, store your language and currency preferences, and enable core features such as the game lobby and cashier. Disabling essential cookies will prevent you from using the platform.
• Analytics Cookies: Used to collect anonymized data about how players navigate the platform, which pages are most visited, and where users encounter difficulties. This data helps us improve the user experience. Analytics data is aggregated and cannot be used to identify individual players.
• Functional Cookies: Store optional preferences such as your preferred game category, notification settings, and recently played games, so that your experience is consistent across sessions.
• Security Cookies: Used by our fraud detection systems to identify and prevent unauthorized access, bot activity, and suspicious login patterns.

7.2 Managing Cookie Preferences

You may control cookie settings through your browser's privacy options. Most modern browsers allow you to block or delete cookies, restrict cookies to specific domains, or receive a notification before any cookie is stored. Please note that blocking essential cookies will impair your ability to use the aifa66 platform, as they are required for session management and authentication.

7.3 Local Storage and Similar Technologies

In addition to cookies, aifa66 may use browser local storage to cache certain platform assets and remember user interface preferences. Local storage data is stored only on your device and is not transmitted to our servers unless explicitly required for a platform function.

8. Data Retention

aifa66 retains personal data for as long as is necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

8.1 Active Account Data

While your account remains active, we retain all registration data, KYC documents, transaction records, and gameplay history for the duration of the account relationship. This data is necessary to deliver our services, comply with AML regulations, and support responsible gaming monitoring.

8.2 Data Following Account Closure

After you close your account or after aifa66 terminates your account, we retain the following data for the periods specified:

• Financial transaction records: Retained for a minimum of 5 years following account closure, as required by international AML and financial record-keeping regulations.
• KYC verification documents: Retained for a minimum of 5 years following account closure, or longer if required by applicable regulatory bodies.
• Customer support communications: Retained for 3 years following account closure for dispute resolution purposes.
• Gameplay records: Retained for 3 years following account closure for audit and fraud investigation purposes.
• Self-exclusion records: If you have elected to self-exclude, your exclusion record is retained indefinitely to prevent re-registration in violation of the self-exclusion agreement.

8.3 Deletion Requests

You may request deletion of your personal data at any time by contacting our support team at [email protected]. We will process deletion requests within 30 calendar days. Please note that we are legally required to retain certain categories of data (financial records, KYC documents) for the minimum periods described above, and these records cannot be deleted in response to a user request during the mandatory retention window.

9. Data Security

aifa66 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction.

9.1 Technical Safeguards

• Encryption in transit: All data transmitted between your device and aifa66 servers is encrypted using TLS 1.2 or higher, with 256-bit AES encryption for all sensitive payloads.
• Encryption at rest: All personal data and sensitive documents stored on our servers are encrypted using AES-256. Encryption keys are managed using a dedicated key management system with strict access controls.
• Access controls: Employee access to personal data is restricted on a strict need-to-know basis. All internal access is authenticated, logged, and audited. Administrative access requires multi-factor authentication.
• Penetration testing: Our platform undergoes regular independent penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
• Intrusion detection: Real-time intrusion detection systems monitor network traffic and application behavior for signs of unauthorized access or data exfiltration attempts.

9.2 Organizational Safeguards

• All aifa66 employees with access to personal data receive mandatory data protection and privacy training upon onboarding and at regular intervals thereafter.
• Third-party service providers are subject to data processing agreements that impose security standards equivalent to or exceeding those applied internally by aifa66.
• We maintain a documented incident response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users without undue delay.

10. Your Data Rights

aifa66 respects your rights over your own personal data. You may exercise any of the following rights by contacting our support team at [email protected]. We will respond to all verified requests within 30 calendar days.

10.1 Right of Access

You have the right to request a copy of all personal data that aifa66 holds about you, together with information about how it is being processed. We will provide this information in a clear, structured format.

10.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Many fields (such as email address and phone number) can be updated directly in your account settings. For corrections to name, date of birth, or other identity-linked fields, please contact our support team with supporting documentation.

10.3 Right to Erasure

Subject to our legal data retention obligations (see Section 8), you have the right to request deletion of your personal data. We will honor erasure requests promptly for all data that is not subject to a mandatory retention period.

10.4 Right to Restrict Processing

In certain circumstances — for example, while a data accuracy dispute is being resolved — you have the right to request that we restrict processing of your personal data to storage only, without any active use.

10.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (e.g., CSV or JSON), and to request that we transmit it directly to another data controller where technically feasible.

10.6 Right to Object

You have the right to object to processing based on legitimate interests, including profiling for personalized marketing. If you object to marketing communications, we will cease that processing immediately while continuing to send transactional communications necessary for your account.

10.7 Rights Related to Automated Decision-Making

Some decisions affecting your account — such as fraud risk scoring and responsible gaming alerts — are made using automated systems. You have the right to request human review of any automated decision that significantly affects you, and to contest that decision if you believe it was made in error.

11. Protection of Minors

aifa66 is strictly an adult platform. You must be at least 21 years of age to register an account or use any of our services. We do not knowingly collect personal data from individuals under the age of 21.

During the account registration process and KYC verification, we take active steps to verify that all members meet the minimum age requirement. Any account discovered to belong to a person under 21 will be immediately suspended, all funds will be frozen pending investigation, and the matter will be referred to our compliance team in accordance with applicable regulations.

If you are a parent or guardian and you believe that a minor under your care has created an account on aifa66, please contact our support team at [email protected] immediately. We will investigate the matter promptly and take all necessary action to close the account and return any funds appropriately.

We also strongly encourage all adults who share devices or households with minors to use device parental controls and to ensure that their aifa66 account credentials are not accessible to underage individuals. For guidance on parental control tools, please visit our Responsible Gaming page.

12. Policy Updates

aifa66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform features. All amendments will take effect immediately upon publication on this page.

When we make material changes to this policy — changes that significantly affect how we collect, use, or share your personal data — we will notify registered members via email to the address on file with your account. The notification will summarize the key changes and direct you to this page for the full updated text.

The "Last Updated" date at the top of this page will always reflect when the most recent revision was made. We encourage you to review this policy periodically. Continued use of the aifa66 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data aifa66 holds about you, please reach out to our dedicated data protection team through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week on the aifa66 platform
• Response Time: All privacy-related inquiries will receive an acknowledgment within 2 business days, with full resolution within 30 calendar days.

Our support team is fluent in both English and Bahasa Indonesia and is trained to handle data subject requests professionally and confidentially. When submitting a data access, rectification, or deletion request, please provide sufficient information to allow us to verify your identity before we can fulfill the request.