Data Protection

Privacy Policy — How ari03 Collects, Uses, and Protects Your Data

Your privacy matters to ari03. This Policy explains exactly what personal information we collect, why we collect it, how it is used, and the rights you hold over your own data as an ari03 member based in Indonesia.

Last Updated: January 2026 Applies to: Indonesian Members 21+ Only
Data We Collect — identity, payment, and usage information
How It's Used — account services, KYC, fraud prevention
Who Receives It — vetted service providers only, never sold
Your Rights — access, correction, deletion, and portability

Six Core Privacy Commitments ari03 Makes to You

We Never Sell Your Data

ari03 does not sell, rent, or trade your personal information to third-party advertisers, data brokers, or any other commercial party. Your data is used exclusively to operate and improve the ari03 platform and to comply with legal obligations.

Encryption at Every Layer

All data transmitted to and from the ari03 platform is protected by 256-bit SSL/TLS encryption. Sensitive data stored at rest — including payment records and KYC documents — is encrypted using industry-standard protocols on secured, access-controlled servers.

Minimal Data Collection

ari03 collects only the personal data that is strictly necessary to operate the platform, verify identities, process payments, and comply with applicable regulations. We do not collect data beyond what is required for these purposes.

You Control Your Data

As an ari03 member, you have the right to access the personal data we hold about you, request corrections to inaccurate data, and — subject to applicable legal retention requirements — request deletion of your account data. Requests are handled via [email protected].

Vetted Third-Party Processors Only

Where ari03 shares data with third-party service providers — such as payment processors, identity verification services, and customer support tools — those providers are contractually bound to handle your data in accordance with the same privacy standards ari03 applies internally.

Breach Notification Commitment

In the event of a data security incident that materially affects your personal information, ari03 will notify affected members via their registered email address within a reasonable period following discovery, in accordance with applicable data protection standards.

Section 01
Introduction & Scope

This Privacy Policy describes how ari03 ("we", "us", "our") — the online betting and gaming platform operating at https://ari03.cam — collects, uses, stores, shares, and protects the personal information of individuals who register as members or otherwise interact with the ari03 platform ("you", "your", "Member").

ari03 is committed to responsible data stewardship. We operate under internationally recognised data protection principles and extend those protections to all our members, with specific consideration for members resident in Indonesia. Indonesia is the primary market served by ari03, and our data practices are calibrated to serve Indonesian users — from Jakarta and Surabaya to Bali, Medan, Bandung, and Makassar — with the same level of privacy protection that international-standard platforms provide.

By creating an account on ari03 or by continuing to use the platform after the date of this Policy's publication, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, you should discontinue use of the ari03 platform.

This Privacy Policy is to be read together with the ari03 Terms & Conditions. In the event of any conflict between the two documents, the Terms & Conditions shall prevail on operational matters; this Policy shall prevail on matters of data processing.
Section 02
Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Personal Data
Any information that identifies or can identify a natural person, directly or indirectly.
Processing
Any operation performed on personal data — collection, storage, use, disclosure, deletion, or any combination thereof.
Data Controller
ari03 — the entity that determines the purposes and means of processing personal data.
Data Processor
A third-party service provider that processes personal data on behalf of ari03 under a binding data processing agreement.
KYC
Know Your Customer — the identity and document verification procedure ari03 conducts before enabling withdrawals.
Cookies
Small text files stored on your device by your browser when you visit the ari03 platform.
Sensitive Data
A subset of personal data requiring heightened protection — includes identity documents (KTP), financial records, and health information related to responsible gaming tools.
IDR / Rp
Indonesian Rupiah — the sole currency of the ari03 platform and all financial transaction records.
Section 03
Personal Data We Collect

ari03 collects personal data in several categories, depending on how you interact with the platform. The categories and specific data points collected are as follows:

3.1 — Identity & Registration Data

Full legal name, date of birth, email address, chosen username, and password (stored in hashed form). This data is collected at the point of registration and is required to create and maintain your ari03 Account.

3.2 — KYC & Verification Documents

Copies of government-issued identity documents (National Identity Card / KTP, passport), proof-of-address documents (utility bills, bank statements), and proof-of-payment-method records (screenshots of BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, or ShopeePay account ownership). KYC documents are required before withdrawal access is granted.

3.3 — Financial Transaction Data

Deposit and withdrawal records, transaction amounts in IDR (Rp), payment method details (bank account numbers, e-wallet identifiers), and transaction timestamps. This data is retained for regulatory compliance and fraud prevention purposes.

3.4 — Usage & Behavioural Data

Betting history, game session data, login timestamps, IP address, device type, operating system, browser type, pages visited within the ari03 platform, and session duration. This data is used to improve platform performance and detect unusual activity.

3.5 — Communication Data

Records of your communications with ari03 support staff via live chat, email ([email protected]), WhatsApp, and in-platform messaging. These records are retained to resolve disputes and maintain service quality.

3.6 — Responsible Gaming Data

Self-exclusion preferences, deposit and loss limit settings, session time limits, and any self-assessment quiz responses submitted through the ari03 responsible gaming tools. This data is treated as sensitive and is used solely for the purpose of delivering player protection features.

Section 04
How We Collect Your Data

ari03 collects personal data through the following mechanisms:

  • Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, use live chat or email support, or interact with responsible gaming tools on the platform.
  • Automatically via the platform — through cookies, server logs, and session-tracking technology when you browse and use the ari03 website or mobile interface. See Section 10 for full cookie details.
  • From third-party verification services — where ari03 uses an external identity verification provider to cross-check the KYC documents you submit, that provider may return verification status data to ari03.
  • From payment providers — transaction confirmation data received from BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja when you initiate a deposit or withdrawal.
ari03 does not purchase personal data from data brokers, advertising networks, or any other third-party data aggregators. All personal data we hold was collected directly from you or generated through your use of the ari03 platform.
Section 05
Purposes of Processing

ari03 processes your personal data for the following specific purposes:

  1. Account creation and management: To register, authenticate, and administer your ari03 Account, including the reset of passwords and the maintenance of account preferences.
  2. Identity verification (KYC): To verify that you meet the age (21+) and eligibility requirements, and to confirm the ownership of payment methods used on the platform.
  3. Payment processing: To facilitate deposits and withdrawals in IDR via supported Indonesian banking and e-wallet channels, and to maintain accurate financial records of all transactions.
  4. Responsible gaming: To implement and enforce deposit limits, loss limits, session time restrictions, reality-check reminders, and self-exclusion requests made by Members using ari03's player protection tools.
  5. Customer support: To respond to and resolve account queries, complaints, and disputes submitted via live chat, email, WhatsApp, or in-platform messaging.
  6. Fraud detection and security: To identify and prevent fraudulent account registrations, duplicate accounts, money laundering, bonus abuse, and other prohibited conduct as defined in the ari03 Terms & Conditions.
  7. Legal and regulatory compliance: To fulfill obligations imposed by applicable international gaming licences, anti-money laundering (AML) requirements, and other applicable laws.
  8. Platform improvement: To analyse usage patterns and technical performance data in order to improve platform features, user experience, and stability across devices commonly used by Indonesian players.
  9. Marketing communications (with consent): To send promotional emails, SMS, or in-platform notifications about offers, bonuses, and platform updates — where you have explicitly opted in to receive such communications. You may withdraw this consent at any time by contacting [email protected].
Section 06
Legal Basis for Processing

ari03 processes personal data only where a valid legal basis exists. The legal bases applicable to each processing activity are as follows:

Contractual Necessity

Processing required to perform the contract between ari03 and the Member — including account registration, payment processing, game delivery, KYC verification, and customer support. Without this processing, ari03 cannot provide its services to you.

Legal Obligation

Processing required to comply with applicable laws and regulations — including AML obligations, age verification requirements (21+), and record-keeping requirements imposed by ari03's international gaming licence.

Legitimate Interests

Processing necessary for ari03's legitimate business interests — including fraud prevention, platform security, responsible gaming enforcement, and platform improvement — provided those interests are not overridden by your fundamental privacy rights.

Consent

Processing carried out solely on the basis of your explicit, freely-given consent — including marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

Section 07
Sharing Your Personal Data

ari03 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

  • Payment processors: We share transaction data with the relevant Indonesian bank or e-wallet provider (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process the financial transaction you have initiated.
  • Identity verification providers: Where ari03 uses a third-party KYC service to verify the identity documents you submit, we share the relevant document data with that provider under a binding data processing agreement.
  • Customer support tools: Where ari03 uses third-party software to manage live chat, email ticketing, or in-platform messaging, communication data may be stored within those systems. All such tools are contractually bound to ari03's data protection standards.
  • Analytics providers: Anonymised, aggregated usage data may be shared with analytics platforms to improve platform performance. No personally identifiable information is included in such shared data.
  • Legal and regulatory authorities: Where required by applicable law, court order, or regulatory requirement, ari03 may disclose personal data to law enforcement agencies, financial intelligence units, or other official bodies. We will notify you of such disclosures where legally permitted to do so.
  • Business transfers: In the event of a merger, acquisition, or sale of the ari03 business or its assets, personal data held by ari03 may be transferred to the acquiring entity. You will be notified of any such transfer via your registered email address prior to its completion where practicable.
All third-party data processors engaged by ari03 are required to sign a Data Processing Agreement (DPA) that obliges them to process your data only as instructed by ari03, to maintain appropriate security measures, and to delete or return data upon termination of the engagement.
Section 08
International Data Transfers

As an internationally operated platform, ari03's infrastructure and some of its third-party service providers may be located in countries other than Indonesia. Where personal data is transferred outside Indonesia to a country that does not provide an equivalent level of data protection, ari03 implements appropriate safeguards, which may include:

  • Standard contractual clauses approved by recognised data protection authorities
  • Binding corporate rules where the recipient is part of the same corporate group
  • Adequacy decisions, where the destination country has been assessed as providing adequate data protection

By using the ari03 platform, you acknowledge that your personal data may be processed outside Indonesia as described in this section, and you consent to such transfers subject to the safeguards described above.

Section 09
Data Retention

ari03 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Active Account Data

Personal data associated with an active ari03 Account is retained for the duration of the membership, plus a period following account closure to accommodate dispute resolution, chargebacks, and regulatory inquiries.

Financial Transaction Records

Transaction records — including deposit and withdrawal history in IDR (Rp) — are retained for a minimum of five years from the date of the transaction, in line with standard AML and financial record-keeping obligations.

KYC Documents

Identity verification documents (KTP, passport, proof of address) are retained for a minimum of five years following account closure or the date of the last verified transaction, whichever is later.

Communication Records

Support communications (live chat transcripts, email correspondence, WhatsApp records) are retained for a minimum of two years to support dispute resolution and service quality monitoring.

Responsible Gaming Records

Self-exclusion records and responsible gaming tool settings are retained for the duration of the exclusion period plus a minimum of five years following its expiry, to prevent circumvention of self-exclusion commitments.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with a specific individual.

Section 10
Cookies & Tracking Technologies

ari03 uses cookies and similar tracking technologies to operate the platform, maintain session state, and improve the user experience. The categories of cookies used on ari03 are as follows:

Strictly Necessary Cookies

These cookies are essential for the ari03 platform to function. They maintain your login session, remember your active bet slip, and enable secure navigation between pages. These cookies cannot be disabled without impairing platform functionality.

Performance & Analytics Cookies

These cookies collect anonymised data about how Members use the ari03 platform — which pages are visited most frequently, how long sessions last, and where errors occur. This data is used to improve platform stability and user experience. No personally identifiable information is captured by these cookies.

Functional Cookies

These cookies remember your preferences — such as language settings, display preferences, and responsible gaming tool configurations — so that you do not need to re-enter them on each visit.

Most browsers allow you to control cookie settings through the browser's preferences or settings menu. Disabling strictly necessary cookies will impair your ability to use the ari03 platform normally. Disabling performance or functional cookies will not prevent you from accessing the platform but may reduce the quality of your experience.

Section 11
Your Data Rights

As an ari03 Member, you hold the following rights with respect to the personal data we process about you. All requests can be submitted to [email protected] with the subject line "Data Rights Request".

Right What It Means How to Exercise
Right of Access You may request a copy of all personal data ari03 holds about you, along with information about how it is processed. Email [email protected]. We will respond within 30 days.
Right to Rectification You may request correction of any personal data that is inaccurate or incomplete. Update basic details via your account dashboard, or contact support for KYC document corrections.
Right to Erasure You may request deletion of your personal data, subject to legal retention requirements and active investigation obligations. Email [email protected]. Requests involving data subject to legal retention will be partially fulfilled.
Right to Restriction You may request that ari03 restrict the processing of your data while a rectification or objection request is under review. Email [email protected] with details of your restriction request.
Right to Portability You may request a machine-readable copy of the personal data you provided to ari03 for transfer to another service provider. Email [email protected]. Data will be provided in CSV or JSON format.
Right to Object You may object to processing carried out on the basis of legitimate interests, including direct marketing communications. Email [email protected]. Marketing opt-out takes effect within 5 business days (WIB).
Right to Withdraw Consent Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting prior processing. Email [email protected] or use the unsubscribe link in any marketing email.
ari03 will respond to all data rights requests within 30 calendar days. Where the request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension within the initial 30-day period.
Section 12
Children & Minors

The ari03 platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. All accounts are subject to age verification through the KYC process.

If ari03 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, the data will be reviewed, and — where the minor has not suffered financial harm through no fault of the platform — the data will be deleted in accordance with our retention policies. Any deposits associated with an underage account may be returned to the originating payment method following verification of the account holder's identity.

Age Restriction: You must be at least 21 years of age to hold an ari03 Account. By registering, you confirm that you are 21 or older. ari03 takes underage gambling extremely seriously and will act swiftly upon any report or detection of underage account usage.
Section 13
Security Measures

ari03 implements a multi-layered security framework to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Key security measures include:

  • 256-bit SSL/TLS encryption on all data transmitted between your device and the ari03 platform
  • Encryption at rest for sensitive data stored in ari03's database infrastructure, including KYC documents and payment records
  • Access controls — internal access to personal data is restricted to ari03 staff who require it to perform their specific job function, and is governed by role-based access control policies
  • Two-factor authentication (2FA) available on all Member accounts to prevent unauthorized login
  • Regular security audits and penetration testing conducted by qualified third-party security professionals
  • Incident response procedures — ari03 maintains a documented data breach response plan, including notification procedures for affected Members and relevant authorities

While ari03 takes all reasonable and practicable steps to protect your personal data, no digital system is completely immune to security risks. We encourage all Members to use strong, unique passwords for their ari03 accounts, enable two-factor authentication, and notify [email protected] immediately if they suspect unauthorized access to their account.

Section 14
Changes to This Policy

ari03 reserves the right to update or amend this Privacy Policy at any time. The "Last Updated" date at the top of this document will be revised to reflect any changes. The current version of the Policy is always available at https://ari03.cam/privacy-policy.

Where a change to this Policy materially affects the way in which we process your personal data — for example, introducing a new purpose of processing or a new category of data sharing — ari03 will notify affected Members via the email address registered to their account before the change takes effect. For material changes that affect consent-based processing, we will request fresh consent where required.

Continued use of the ari03 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any update to this Policy, you should close your ari03 account and cease using the platform. Account closure requests can be submitted to [email protected].

Section 15
Contact & Data Protection Queries

For all privacy-related queries, data rights requests, or concerns about how ari03 handles your personal data, please contact us using the channels below. All privacy correspondence is handled with priority and with the full attention of the relevant ari03 privacy and compliance team.

Privacy & Data Rights Requests (Email)

Email address: [email protected] — displayed as plain text (not a clickable link). Please include "Data Rights Request" or "Privacy Query" in your subject line. Target response: within 30 calendar days for formal rights requests; within 2–8 hours for general privacy queries during WIB business hours.

General Support (Live Chat)

Available 24/7 via the ari03 platform. For privacy matters, please ask to be connected to the compliance team. Indonesian-speaking agents are available during WIB business hours (08:00–24:00 WIB).

Postal Address & Formal Complaints

For formal written data protection complaints or regulatory correspondence, please submit your communication via email to [email protected] with the subject line "Formal Privacy Complaint". ari03 will acknowledge receipt within 5 business days and provide a substantive response within 30 calendar days.

ari03 values transparent, responsive communication on all data protection matters. If you are unsatisfied with ari03's response to a privacy concern, you retain the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction.

Questions About Your Data on ari03?

Our FAQ covers the most common questions about account security and data. You can also review our full Terms & Conditions or head back to the homepage.