Your Privacy Commitment

At ato108, we are deeply committed to protecting your personal information and respecting your privacy rights. This Privacy Policy explains how we collect, use, store, and protect your data when you use our platform. By accessing ato108 services, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. We operate in full compliance with international data protection standards and maintain the highest security protocols to safeguard your information.

1. Introduction

This Privacy Policy applies to all personal information collected by ato108 through our website, mobile applications, customer support channels, and any other services we provide. ato108 operates as an online gaming and sports betting platform specifically designed for Indonesian players, and we take our responsibility to protect your data seriously.

This policy explains what information we collect, why we collect it, how we use it, who we share it with, and what rights you have regarding your personal data. We encourage you to read this policy carefully and contact us if you have any questions or concerns about how we handle your information.

Data Controller: ato108 acts as the data controller for all personal information collected through our platform. We determine the purposes and means of processing your personal data and are responsible for ensuring compliance with applicable data protection regulations.

2. Information We Collect

To provide our services effectively and comply with legal obligations, ato108 collects various categories of personal information. We collect information directly from you, automatically through your use of our platform, and occasionally from third-party sources.

2.1 ACCOUNT REGISTRATION DATA

When you create an account with ato108, we collect:

  • Full legal name (as it appears on government-issued ID)
  • Date of birth (to verify you are 21 or older)
  • Email address (for account communications and password recovery)
  • Mobile phone number (for account security and two-factor authentication)
  • Residential address (city, province, postal code)
  • Username and password (encrypted and stored securely)
  • Preferred currency (IDR for Indonesian players)

2.2 IDENTITY VERIFICATION DATA (KYC)

To comply with Know Your Customer (KYC) regulations and prevent fraud, we collect:

  • Government-issued identification documents (Indonesian KTP, passport, driver's license)
  • Proof of address documents (utility bills, bank statements dated within 3 months)
  • Selfie photographs holding your ID document (for facial verification)
  • Payment method verification (bank account statements, e-wallet screenshots)
  • Additional documentation requested during enhanced due diligence investigations

2.3 FINANCIAL TRANSACTION DATA

When you deposit or withdraw funds, we collect:

  • Bank account numbers and bank names (BCA, BRI, BNI, Mandiri)
  • E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja account details)
  • Transaction history (deposits, withdrawals, amounts, timestamps)
  • Payment processor information
  • Currency conversion data (if applicable)

2.4 GAMING ACTIVITY DATA

To provide gaming services and ensure fair play, we collect:

  • Betting history (sports bets, casino wagers, lottery ticket purchases)
  • Game play patterns and session durations
  • Winnings and losses
  • Bonus usage and wagering requirement progress
  • Responsible gaming settings (deposit limits, session timers, self-exclusion requests)

2.5 TECHNICAL & USAGE DATA

We automatically collect technical information when you use ato108:

  • IP address and geolocation data (to verify Indonesian residency)
  • Device information (type, operating system, browser version)
  • Login timestamps and session duration
  • Pages visited, features used, and navigation patterns
  • Error logs and crash reports
  • Cookies and similar tracking technologies (see Section 8)

2.6 COMMUNICATIONS DATA

When you contact our customer support or interact with us, we collect:

  • Support ticket contents and chat transcripts
  • Email correspondence
  • Phone call recordings (with your consent, for quality assurance)
  • Feedback, reviews, and survey responses

3. How We Use Your Information

ato108 processes your personal information for specific, legitimate purposes. We use your data to:

3.1 Provide and Improve Services

  • Create, maintain, and authenticate your account
  • Process deposits, withdrawals, and other financial transactions
  • Enable you to place bets and play casino games
  • Calculate winnings, losses, and bonus eligibility
  • Deliver customer support and respond to your inquiries
  • Personalize your gaming experience based on preferences
  • Analyze platform usage to improve functionality and user experience

3.2 Legal & Regulatory Compliance

  • Verify your age (21+ requirement) and identity
  • Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
  • Detect and prevent fraud, money laundering, and other illegal activities
  • Enforce our Terms & Conditions and prevent terms violations
  • Respond to legal requests, court orders, and regulatory inquiries
  • Maintain records as required by gambling industry regulations

3.3 Security & Fraud Prevention

  • Monitor for suspicious activity and potential account compromises
  • Detect patterns indicating bonus abuse or collusion
  • Prevent multi-accounting and unauthorized account access
  • Protect against distributed denial-of-service (DDoS) attacks
  • Investigate disputes and resolve player complaints

3.4 Marketing & Communications (With Consent)

  • Send promotional offers, bonuses, and exclusive deals
  • Notify you about new games, features, and platform updates
  • Deliver personalized recommendations based on your gaming preferences
  • Conduct market research and customer satisfaction surveys

You can opt out of marketing communications at any time through your account settings or by contacting support. Opting out does not affect essential service communications related to your account, transactions, or legal notices.

3.5 Responsible Gaming

  • Monitor gaming behavior for signs of problematic gambling
  • Implement deposit limits, session timers, and self-exclusion requests
  • Provide access to responsible gaming resources and support
  • Comply with self-exclusion registries and exclusion databases

4. Information Sharing & Disclosure

ato108 does not sell your personal information to third parties. However, we may share your data in the following limited circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist in operating our platform:

  • Payment Processors: Banks and e-wallet providers to facilitate deposits and withdrawals
  • Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and other suppliers to deliver gaming content
  • Identity Verification Services: KYC/AML verification providers to confirm your identity
  • Cloud Hosting: Infrastructure providers for secure data storage and platform hosting
  • Customer Support Tools: Live chat and ticketing systems to provide support services
  • Analytics Providers: Services that help us understand platform usage and improve performance

All service providers are contractually bound to protect your data, use it only for the specified purposes, and comply with applicable data protection laws.

4.2 Legal Requirements

We may disclose your information when required by law or to protect our legal rights:

  • In response to court orders, subpoenas, or legal process
  • To comply with regulatory investigations or audits
  • To cooperate with law enforcement investigating illegal activity
  • To enforce our Terms & Conditions and prevent fraud
  • To protect the safety and security of our users and platform

4.3 Business Transfers

If ato108 undergoes a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you before your data is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information for other purposes with your explicit consent, which you can withdraw at any time.

5. Data Security Measures

ato108 implements industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

Encryption

  • 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using military-grade SSL certificates
  • Database Encryption: Personal information stored in our databases is encrypted at rest
  • Password Hashing: Account passwords are cryptographically hashed using bcrypt and never stored in plain text

Access Controls

  • Strict role-based access controls limit employee access to personal data on a need-to-know basis
  • Multi-factor authentication required for administrative access to systems
  • Regular security audits and penetration testing to identify vulnerabilities
  • Comprehensive logging and monitoring of all access to personal information

Infrastructure Security

  • Secure cloud hosting with redundant backups and disaster recovery plans
  • Firewalls and intrusion detection systems to prevent unauthorized access
  • Regular security updates and patches applied to all systems
  • DDoS protection and traffic filtering to prevent service disruptions

Organizational Measures

  • Mandatory data protection training for all employees and contractors
  • Strict confidentiality agreements binding all personnel
  • Incident response procedures for data breaches or security events
  • Regular compliance audits by independent third parties

While we implement comprehensive security measures, no system is completely impenetrable. If you suspect unauthorized access to your account, change your password immediately and contact our support team.

6. Data Retention

ato108 retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy and comply with legal obligations.

Retention Periods

  • Active Accounts: Personal data is retained for the duration of your active account plus any legally required retention period
  • Closed Accounts: Most data is deleted within 30 days of account closure, except information required for legal compliance
  • Financial Records: Transaction history retained for 7 years to comply with financial regulations and tax requirements
  • KYC Documents: Identity verification documents retained for 5 years after account closure for AML compliance
  • Gaming History: Betting records retained for 5 years to resolve disputes and comply with gambling regulations
  • Communications: Support correspondence retained for 3 years for quality assurance and dispute resolution

After retention periods expire, personal information is securely deleted or anonymized. Anonymized data (stripped of personal identifiers) may be retained indefinitely for statistical analysis and platform improvement.

7. Your Privacy Rights

As an ato108 user, you have the following rights regarding your personal information:

Right to Access

You can request a copy of all personal information we hold about you. This includes account details, transaction history, gaming activity, and KYC documents. We will provide this information in a commonly used electronic format within 30 days of your request.

Right to Rectification

If any of your personal information is inaccurate or incomplete, you have the right to request corrections. You can update most information directly through your account settings. For changes requiring verification (such as name or date of birth), contact our support team with supporting documentation.

Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal information, subject to legal and regulatory retention requirements. We cannot delete information required for compliance with financial regulations, AML laws, or dispute resolution.

Right to Restrict Processing

You can request that we limit how we process your data in certain circumstances, such as while we investigate the accuracy of disputed information.

Right to Data Portability

You have the right to receive your personal information in a structured, machine-readable format and transmit it to another service provider where technically feasible.

Right to Object

You can object to processing of your personal information for direct marketing purposes at any time. For other types of processing, you may object on grounds relating to your particular situation.

Right to Withdraw Consent

Where we rely on your consent to process data (such as for marketing communications), you can withdraw that consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

How to Exercise Your Rights

To exercise any of these rights, contact us at:

Email: [email protected]
Subject Line: "Privacy Rights Request"
Include: Your account username, full name, and specific request

We will respond to your request within 30 days. If your request is complex or we receive multiple requests, we may extend this period by an additional 60 days with notification.

8. Cookies & Tracking Technologies

ato108 uses cookies and similar tracking technologies to provide, protect, and improve our services. A cookie is a small text file stored on your device that helps us recognize you, remember your preferences, and analyze how you use our platform.

Types of Cookies We Use

Essential Cookies

These cookies are necessary for the platform to function and cannot be disabled. They enable core functionality such as account authentication, security features, and payment processing. Without these cookies, services you have requested cannot be provided.

Performance Cookies

These cookies collect information about how you use our platform, such as which pages you visit most often and any error messages you receive. This data helps us improve platform performance and user experience. All information is aggregated and anonymous.

Functionality Cookies

These cookies allow our platform to remember your preferences (such as language, currency, and game favorites) so you don't have to reset them each visit. They enhance your experience by providing personalized features.

Targeting/Advertising Cookies (With Consent)

With your consent, these cookies may be used to deliver relevant promotional content. They track your browsing activity to understand your interests and display targeted offers. You can opt out of advertising cookies through your account settings.

Cookie Management

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. However, disabling cookies may prevent you from accessing certain features or using some services. To manage cookies:

  • Check your browser's help section for instructions on blocking or deleting cookies
  • Adjust cookie preferences through your ato108 account settings
  • Use browser privacy extensions to control third-party tracking

9. Third-Party Services & Links

ato108 integrates various third-party services to deliver our platform functionality. These services may collect and process your information independently:

Game Providers

When you play games on ato108, you interact directly with game providers such as Pragmatic Play, Evolution Gaming, Microgaming, and NetEnt. These providers may collect gaming session data, device information, and other technical details. Each provider operates under its own privacy policy.

Payment Processors

Financial transactions are processed through Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These institutions collect and process payment information in accordance with their own privacy policies and applicable financial regulations.

External Links

Our platform may contain links to external websites for informational purposes. ato108 is not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policies of any external sites you visit.

10. Children's Privacy

ato108 services are strictly intended for adults aged 21 and older. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected information from someone under 21, we will delete that information immediately.

Parents or guardians who believe their child has provided personal information to ato108 should contact us immediately so we can investigate and remove the information. We take underage gambling prevention seriously and employ robust age verification procedures during account registration and KYC processes.

11. Privacy Policy Updates

ato108 may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will notify you through:

  • Prominent notice on our homepage
  • Email notification to your registered email address
  • In-platform notification upon your next login

The "Last Updated" date at the top of this policy indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Continued use of ato108 services after policy updates constitutes acceptance of the revised terms. If you disagree with any changes, you must discontinue using our services and may request account closure.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how ato108 handles your personal information, please contact our Data Protection team:

Email: [email protected]
Subject Line: "Privacy Inquiry" or "Data Protection Request"
Operating Hours: 24/7 (WIB timezone)
Response Time: Within 48 hours for privacy-related inquiries

When contacting us about privacy matters, please include:

  • Your full name and account username (never include your password)
  • Detailed description of your inquiry or request
  • Supporting documentation if requesting data correction or deletion
  • Preferred method of response (email or account notification)

Our Indonesian-speaking support team is trained in data protection procedures and will assist you promptly. For urgent security concerns (such as suspected account compromise), indicate "URGENT" in your subject line for priority handling.

Privacy Commitment Summary

ato108 is committed to protecting your privacy and maintaining the confidentiality of your personal information. We collect only the data necessary to provide our services, use it transparently for legitimate purposes, protect it with industry-leading security measures, and respect your rights to access, correct, and control your information. Your trust is our foundation, and we work every day to earn and maintain it through responsible data stewardship. If you have any concerns about how we handle your data, please contact us—we're here to help.

Data Protection at a Glance

256-Bit Encryption

All data transmitted and stored is protected by military-grade SSL encryption. Your information is secure from unauthorized access.

Compliance Certified

We comply with international data protection standards, KYC/AML regulations, and undergo regular third-party security audits.

No Data Selling

ato108 never sells your personal information to third parties. Your data is used solely for providing our services.

Your Rights Protected

Access, correct, or delete your data anytime. We respect your privacy rights and process requests within 30 days.

Secure Infrastructure

Cloud hosting with redundant backups, DDoS protection, and firewalls ensure your data remains safe and available.

24/7 Privacy Support

Our data protection team is available around the clock to address your privacy concerns and assist with data requests.

Questions About Your Privacy?

Our data protection team is here to help. Contact us anytime for clarification on how we handle your personal information or to exercise your privacy rights.