Privacy Policy — ags189

1.1 Data Controller. ags189 (referred to in this Policy as "ags189", "we", "us", or "our") is the data controller responsible for the personal information collected through the platform at https://ags189.net. ags189 is an internationally licensed offshore gaming operator whose platform serves players primarily across Indonesia, including users located in Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Makassar, and Palembang.

1.2 Scope of This Policy. This Privacy Policy governs all personal data processing activities carried out by ags189 in connection with the provision of its online gaming services, including sports betting, live casino, slot games, togel (Indonesia's traditional numbers lottery), keno, and all other products available on the platform. It applies regardless of the device or method used to access the platform.

1.3 Contact. For all privacy-related enquiries, requests, or complaints, please contact our support team at [email protected] or via WhatsApp at +62 811 0000 189. Our designated Data Protection contact is available during business hours (WIB, UTC+7).

ags189 collects the following categories of personal data in connection with your use of the platform:

2.1 Sensitive Data. ags189 does not intentionally collect special categories of sensitive personal data (such as health data, racial or ethnic origin, religious beliefs, or biometric data) except where strictly required for identity verification purposes (e.g., a photograph on a government-issued ID). Where such data is incidentally received, it is processed only to the extent necessary for the verification purpose and is not used for any other purpose.

ags189 collects personal data through the following channels and methods:

• Direct Registration: Information you voluntarily provide when creating or updating your account, including during the KYC verification process.
• Payment Transactions: Financial and identity data provided when you make a deposit or request a withdrawal via Indonesian bank transfer, e-wallet, or cryptocurrency.
• Customer Support Interactions: Data you share when contacting our support team via live chat, email, or WhatsApp.
• Automated Technologies: Technical and usage data collected automatically through cookies, web beacons, pixel tags, server logs, and similar tracking technologies when you access the platform.
• Third-Party Verification Providers: Identity and fraud-risk data received from KYC/AML service providers, payment processors, and security intelligence partners who assist in verifying your identity and detecting suspicious activity.
• Marketing Partners: Where you have accessed ags189 through an affiliate or referral partner, we may receive limited referral data (such as a click identifier) to attribute your registration correctly. We do not receive your personal data from unrelated third-party advertisers without your consent.

ags189 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your ags189 account, including processing deposits and withdrawals, tracking your balance, and managing bonus entitlements.
• Identity Verification (KYC): To verify your identity and age (21+) in accordance with our obligations as an international gaming operator, and to prevent the use of the platform by minors or by ineligible persons.
• Transaction Processing: To process your deposits and withdrawals securely via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, USDT, and other accepted payment methods.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, multi-accounting, and other prohibited conduct using automated and manual review processes.
• Responsible Gaming: To monitor your gaming activity for indicators of problem gambling, and to enforce any voluntary deposit limits, session limits, or self-exclusion requests you have placed on your account.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance via live chat, email, and WhatsApp in a timely manner.
• Platform Improvement: To analyse usage patterns, identify technical issues, and develop new features and products that better serve Indonesian players.
• Marketing Communications (with consent): To send you promotional emails, SMS messages, or WhatsApp notifications about bonuses, tournaments, seasonal promotions (e.g., Idul Fitri, Ramadhan, Indonesian Independence Day promotions), and new games. You may opt out at any time.
• Legal Compliance: To comply with applicable legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and to enforce our Terms & Conditions.

ags189 processes your personal data on the following legal bases:

6.1 Categories of Recipients. ags189 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to confidentiality obligations:

• Payment Processors & Banks: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja, and cryptocurrency settlement processors — solely to facilitate your transactions.
• KYC & Identity Verification Providers: Third-party services engaged to verify your identity, age, and payment method ownership as part of our KYC process.
• Game Studios & Content Providers: Licensed game studios (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft) may receive session-level data necessary to operate their games on our platform. These providers are contractually prohibited from using your data for their own independent purposes.
• Fraud Prevention & Security Services: Third-party security intelligence providers engaged to detect and prevent fraudulent activity, account takeover, and money laundering.
• IT Infrastructure Providers: Cloud hosting, content delivery, and database management providers who process data on ags189's behalf under strict data processing agreements.
• Legal & Regulatory Authorities: Where required by applicable law, court order, or a lawful request from a competent regulatory or law enforcement authority, ags189 may disclose personal data without prior notice to you.

6.2 No Sale of Personal Data. ags189 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own marketing or commercial purposes. Any data sharing is limited to the operational purposes described in this Policy.

6.3 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of the ags189 business, personal data held by ags189 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the registered email address associated with your account prior to your data becoming subject to a materially different privacy policy.

7.1 Retention Periods. ags189 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, as set out in this Policy, and to comply with applicable legal obligations. The following standard retention periods apply:

7.2 Post-Retention Disposal. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes without further notice to you.

8.1 Technical Safeguards. ags189 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• SSL/TLS Encryption: All data in transit between your device and the ags189 platform is encrypted using TLS 1.2 or higher with 256-bit key strength.
• Encrypted Data Storage: Sensitive personal and financial data stored in our databases is encrypted at rest using AES-256 encryption standards.
• Two-Factor Authentication (2FA): ags189 offers 2FA for all registered accounts and strongly recommends its activation. Staff access to production systems requires mandatory multi-factor authentication.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Anomaly Detection: AI-assisted monitoring systems continuously analyse platform activity for unusual patterns indicative of fraud, account takeover, or data breach attempts, triggering automated alerts and lockdowns where necessary.
• Penetration Testing & Audits: ags189 conducts periodic security audits and penetration tests conducted by independent third-party security firms to identify and remediate vulnerabilities in our infrastructure.

8.2 Your Responsibility. While ags189 employs robust security measures, the security of your account is also dependent on you maintaining the confidentiality of your login credentials. You are responsible for all activity that occurs under your account. If you suspect unauthorised access, contact us immediately at [email protected].

8.3 Data Breach Notification. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, ags189 will notify affected users via their registered email address within 72 hours of becoming aware of the breach, to the extent practicable.

9.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember your actions and preferences over time, so you do not have to re-enter them whenever you return. ags189 uses cookies and similar technologies (including web beacons and pixel tags) across the platform.

9.2 Types of Cookies We Use.

9.3 Managing Cookies. You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set alerts when a cookie is placed. Please note that disabling strictly necessary cookies will impair the functionality of the platform, including the ability to log in and place bets. For detailed browser-specific instructions, refer to the help documentation of your browser (e.g., Chrome, Firefox, Safari, Opera).

As a user of the ags189 platform, you have the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Rights Request". We will respond within 30 business days.

11.1 Strict 21+ Policy. The ags189 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. By creating an account, you confirm that you are at least 21 years old.

11.2 Age Verification Process. ags189 uses a combination of automated checks at registration and mandatory KYC document verification prior to the processing of any withdrawal request to enforce the 21+ age restriction. Where our automated systems flag a potential age concern, account access is suspended pending manual review of identity documents.

11.3 Discovery of Minor's Data. If ags189 discovers that personal data has been collected from a person under 21 years of age, all associated data will be deleted without delay, the account will be permanently closed, and any funds held in the account will be returned to the deposit source after deducting any bonuses received. Parents or guardians who believe their child has registered on the platform are urged to contact us immediately at [email protected] so that we may take prompt action.

12.1 Cross-Border Processing. As an internationally licensed offshore gaming platform, ags189 may transfer your personal data to, and process it in, countries other than Indonesia. These countries may have data protection laws that differ from those applicable in your jurisdiction. Such transfers may occur when your data is processed by our cloud infrastructure providers, game studio partners, or KYC verification services operating in other jurisdictions.

12.2 Transfer Safeguards. Where personal data is transferred outside Indonesia, ags189 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual Safeguards: Standard data protection clauses incorporated into agreements with all third-party processors who receive personal data, requiring them to process data only on ags189's documented instructions and to apply equivalent security standards.
• Adequacy Assessments: Transfer impact assessments conducted prior to sharing data with processors in jurisdictions without recognised adequate data protection frameworks.
• Certification Standards: Preference for processors who hold recognised security certifications (e.g., ISO 27001) that demonstrate commitment to information security best practices.

12.3 Your Acknowledgement. By using the ags189 platform, you acknowledge and consent to the transfer of your personal data to other countries as described in this clause, subject to the safeguards outlined above.

13.1 Policy Updates. ags189 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The updated Policy will be published at https://ags189.net/privacy-policy with a revised effective date at the top of the document.

13.2 Notification of Material Changes. Where we make a material change to this Policy — particularly a change that affects how we use your personal data or your rights — we will notify registered users via their registered email address at least 14 days prior to the change taking effect. Continued use of the platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

13.3 Policy Archive. Previous versions of this Privacy Policy are retained and available upon request by contacting our support team. This ensures you are always able to compare the current Policy against prior versions.

14.1 How to Contact Us. For any questions, concerns, or requests relating to this Privacy Policy or the way ags189 handles your personal data, please contact our support and data protection team through any of the following channels:

• Email: [email protected] — response within 2–6 hours (WIB)
• WhatsApp: +62 811 0000 189 — available 24/7
• Live Chat: Available 24/7 directly from the platform interface

14.2 Data Protection Officer. ags189 has designated an internal Data Protection contact responsible for overseeing compliance with this Privacy Policy and handling data subject rights requests. All privacy-related correspondence should be directed to the channels listed in Clause 14.1 and marked clearly with the subject "Privacy Rights Request" or "DPO Enquiry" to ensure prompt routing to the appropriate team.

14.3 Complaints. If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. For users in Indonesia, please refer to the guidelines of the relevant Indonesian governmental body responsible for electronic systems and transactions. ags189 commits to cooperating fully with any competent supervisory authority in the resolution of complaints.

14.4 Response Times. All privacy rights requests are acknowledged within 5 business days of receipt. Full responses are provided within 30 business days. Complex requests may require an extension; where this is necessary, we will notify you in advance and provide a revised timeline. All response times are calculated in accordance with WIB (Western Indonesia Time, UTC+7) business hours.