Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected by aura88 through our website at https://aura88.cam, mobile applications, customer support channels, and any other services we provide (collectively, the "Platform"). This policy covers all users who access our Platform, whether as registered account holders or casual visitors.

aura88 operates as an online gaming platform serving the Indonesian market with casino games, sports betting, and related entertainment services. As a licensed gaming operator, we are subject to strict regulatory requirements regarding data protection, anti-money laundering compliance, and player protection. This Privacy Policy is designed to meet international data protection standards while addressing specific requirements of operating within the Indonesian market context.

By accessing the aura88 Platform, creating an account, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, storage, and disclosure of your personal data as described herein. If you do not agree with this Privacy Policy, you must not use our Platform or services.

2. Information We Collect

aura88 collects various categories of personal information necessary to provide our services, comply with legal obligations, and enhance user experience. The information we collect includes:

2.1 Information You Provide Directly

When you register an account or interact with our Platform, you voluntarily provide the following information:

• Account Registration Data: Full legal name, date of birth, gender, email address, mobile phone number, residential address, nationality, and preferred currency (Indonesian Rupiah/IDR).
• Identity Verification Documents: Copies of government-issued identification (Indonesian KTP/National Identity Card or passport), proof of address (utility bills, bank statements), selfie photographs for identity confirmation, and any additional documentation required for KYC (Know Your Customer) compliance.
• Financial Information: Bank account details (account number, bank name, account holder name) for Indonesian banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, and BSI; e-wallet account information for OVO, DANA, GoPay, ShopeePay, and LinkAja; transaction history including deposits, withdrawals, wagers, and winnings.
• Communication Data: Content of messages sent through customer support channels including live chat, email correspondence, WhatsApp messages, and any feedback or survey responses you provide.
• Preferences and Settings: Account preferences, notification settings, gaming limits (deposit limits, session time limits), responsible gaming tool selections, and marketing communication preferences.

2.2 Information Collected Automatically

When you use the aura88 Platform, certain information is collected automatically through technological means:

• Device and Technical Information: IP address, device type and model, operating system and version, browser type and version, screen resolution, device identifiers (IMEI, MAC address), and mobile network information.
• Usage Data: Pages visited, features accessed, games played, betting history, session duration, clickstream data, referral sources, and navigation patterns on the Platform.
• Location Data: Approximate geographic location derived from IP address to verify Indonesian residency and comply with geo-restriction requirements. We do not collect precise GPS location data unless you explicitly consent.
• Cookies and Similar Technologies: Session cookies, persistent cookies, web beacons, and local storage technologies to remember login status, preferences, and enable Platform functionality. See Section 8 for detailed cookie information.

2.3 Information from Third Parties

In certain circumstances, we may receive information about you from third-party sources:

• Payment Processors: Transaction confirmation data from Indonesian banks and e-wallet providers to verify successful deposits and withdrawals.
• Identity Verification Services: Enhanced verification data from third-party KYC service providers used to confirm identity authenticity and prevent fraud.
• Game Providers: Game session data, game outcomes, and RTP (Return to Player) statistics from third-party game developers whose content is hosted on our Platform.
• Marketing Partners: Information about referral sources if you accessed aura88 through an affiliate or marketing partner.

3. How We Use Your Information

aura88 processes your personal data for specific, legitimate purposes directly related to providing and improving our gaming services. We use your information for the following purposes:

3.1 Service Provision and Account Management

• Creating and maintaining your user account on the aura88 Platform.
• Authenticating your identity during login and account access.
• Processing deposits, withdrawals, and other financial transactions in Indonesian Rupiah (IDR).
• Providing access to casino games, sports betting markets, and other gaming services.
• Tracking account balances, wagers, winnings, and transaction history.
• Administering bonuses, promotions, cashback offers, and VIP loyalty program benefits.
• Processing customer support requests and resolving technical issues.

3.2 Legal and Regulatory Compliance

• Verifying that you are at least 21 years of age and meet eligibility requirements for online gaming in Indonesia.
• Conducting KYC (Know Your Customer) verification to prevent identity theft, fraud, and money laundering.
• Monitoring transactions for suspicious activity and reporting to relevant authorities as required by anti-money laundering regulations.
• Maintaining records for audit purposes and regulatory inspections by gaming authorities.
• Complying with legal obligations, court orders, and lawful requests from Indonesian government agencies.
• Enforcing our Terms & Conditions and detecting violations such as multiple accounts, collusion, or bonus abuse.

3.3 Platform Security and Fraud Prevention

• Detecting and preventing fraudulent activity, unauthorized access, and security breaches.
• Identifying patterns of suspicious behavior including account takeovers, payment fraud, and gaming manipulation.
• Protecting the integrity of games and betting markets against cheating and exploitation.
• Implementing security measures such as SSL encryption, firewalls, and intrusion detection systems.

3.4 Communication and Marketing

• Sending transactional notifications regarding account activity, deposits, withdrawals, and bonus credits.
• Delivering customer support responses via email, live chat, or WhatsApp.
• Sending promotional offers, new game announcements, and VIP program updates (only if you have consented to marketing communications).
• Conducting surveys to gather feedback on platform experience and service quality.

3.5 Platform Improvement and Analytics

• Analyzing usage patterns to understand how users interact with the Platform and identify popular games or features.
• Conducting performance monitoring to optimize Platform speed, reliability, and mobile responsiveness.
• Developing new features, games, and services based on user preferences and behavior.
• Personalizing gaming recommendations and tailoring content to user interests.

3.6 Responsible Gaming

• Monitoring gaming behavior to identify potential problem gambling patterns.
• Implementing responsible gaming tools including deposit limits, session time reminders, and self-exclusion mechanisms.
• Providing resources and support for users who may be experiencing gambling-related difficulties.

4. Legal Basis for Processing

aura88 processes your personal data based on the following legal grounds recognized under international data protection frameworks:

• Contractual Necessity: Processing is necessary to perform the contract between you and aura88 when you register an account and use our services. This includes processing your registration data, financial transactions, and account management activities.
• Legal Obligations: Processing is required to comply with applicable laws and regulations governing online gaming, including age verification, KYC requirements, anti-money laundering obligations, and reporting to regulatory authorities.
• Legitimate Interests: Processing is necessary for our legitimate business interests in preventing fraud, ensuring platform security, improving services, and conducting analytics, provided such interests do not override your fundamental rights and freedoms.
• Consent: For certain processing activities such as marketing communications, cookies, and analytics, we rely on your explicit consent, which you may withdraw at any time through your account settings or by contacting customer support.

5. How We Share Your Information

aura88 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with selected third parties under the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) process your deposits and withdrawals. These providers receive only the information necessary to complete transactions.
• Game Providers: Third-party game developers and studios whose content appears on aura88 may receive limited usage data to operate their games, but they do not receive your personal identification or financial information.
• Identity Verification Services: Specialized KYC verification providers may receive copies of your identification documents to confirm identity authenticity and prevent fraud.
• Cloud Hosting Providers: Secure cloud infrastructure providers host our servers and databases, maintaining strict data protection standards.
• Customer Support Tools: Live chat software and support ticketing systems process communication data to deliver customer service.
• Analytics and Tracking Services: Analytics platforms receive anonymized or aggregated usage data to help us understand platform performance (see Section 8 on Cookies).

All service providers are contractually bound to protect your data, use it only for specified purposes, and maintain confidentiality in accordance with this Privacy Policy and applicable data protection laws.

5.2 Legal and Regulatory Authorities

We may disclose your personal information to government agencies, law enforcement, regulatory authorities, or courts when:

• Required by Indonesian law or regulations governing online gaming and financial transactions.
• Responding to lawful subpoenas, court orders, or legal processes.
• Complying with anti-money laundering reporting obligations or suspicious activity investigations.
• Cooperating with gaming regulators during audits or compliance reviews.
• Protecting aura88's legal rights or defending against legal claims.

5.3 Business Transfers

In the event aura88 undergoes a merger, acquisition, corporate restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of the business transfer, subject to the same privacy protections described in this policy.

5.4 With Your Consent

We may share your information with third parties when you provide explicit consent for such sharing, for example, when participating in specific promotions or contests that involve partner organizations.

6. Data Security Measures

aura88 implements industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS (Secure Socket Layer/Transport Layer Security) protocols. Financial data and passwords are encrypted at rest using AES-256 encryption standards.
• Access Controls: Personal data is accessible only to authorized aura88 employees and contractors who require access to perform their job functions. Access is granted based on the principle of least privilege and protected by multi-factor authentication.
• Network Security: Our infrastructure is protected by firewalls, intrusion detection systems, and regular security audits to identify and address vulnerabilities.
• Secure Payment Processing: Payment card data (if applicable) is processed through PCI-DSS compliant payment gateways. We do not store complete credit card numbers on our servers.
• Regular Security Audits: Independent third-party security firms conduct periodic penetration testing and vulnerability assessments of our systems.
• Employee Training: All aura88 staff members undergo data protection and security awareness training to ensure proper handling of personal information.
• Incident Response: We maintain a formal incident response plan to quickly detect, contain, and remediate any data security breaches.

While we implement robust security measures, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but commit to promptly notifying affected users and relevant authorities in the event of a data breach as required by applicable law.

7. Data Retention

aura88 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, regulatory, and business requirements. Our retention periods are as follows:

Data Category	Retention Period
Account Registration Data	Duration of account activity plus 5 years after account closure for regulatory compliance
Identity Verification Documents	5 years after account closure as required by anti-money laundering regulations
Financial Transaction Records	7 years after transaction date for tax and audit purposes
Gaming Activity Logs	5 years for regulatory audit and dispute resolution purposes
Customer Support Communications	3 years after last contact for service quality and dispute resolution
Marketing Consent Records	Until consent is withdrawn, then deleted within 30 days
Website Analytics Data	26 months in anonymized/aggregated form for performance analysis

After the applicable retention period expires, personal data is securely deleted or anonymized so that it can no longer identify you. Anonymized data may be retained indefinitely for statistical analysis and business intelligence purposes.

If you request deletion of your account, we will deactivate it and delete personal data in accordance with the retention schedule above, except where retention is required by law or for legitimate business purposes such as fraud prevention or dispute resolution.

8. Cookies and Tracking Technologies

aura88 uses cookies and similar tracking technologies to enhance your experience on our Platform, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize you on subsequent visits.

8.1 Types of Cookies We Use

• Essential Cookies: Strictly necessary for Platform functionality, including session management, authentication, and security features. These cookies cannot be disabled without impairing core services.
• Performance Cookies: Collect anonymous data about how visitors use our Platform, including pages visited, errors encountered, and navigation patterns. This helps us improve Platform performance and user experience.
• Functionality Cookies: Remember your preferences such as language selection, currency display, and game favorites to provide a more personalized experience.
• Analytics Cookies: Used by third-party analytics services (such as Google Analytics) to measure traffic, user behavior, and conversion rates. These help us understand which features are most popular and how to optimize the Platform.
• Marketing Cookies: Track your activity across websites to deliver relevant promotional offers and measure advertising campaign effectiveness (only with your consent).

8.2 Managing Cookie Preferences

You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies, though this may affect Platform functionality. To manage cookies:

• Access your browser settings menu and locate privacy or cookie options.
• Configure cookie preferences to accept all cookies, block all cookies, or selectively accept/block specific types.
• Delete existing cookies stored on your device through browser history settings.

Please note that blocking essential cookies may prevent you from accessing certain Platform features or using core services.

9. Your Privacy Rights

You have certain rights regarding your personal data held by aura88. Depending on your jurisdiction and applicable data protection laws, these rights may include:

9.1 Right to Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data. You may access much of your account information directly through your account dashboard, including transaction history, gaming activity, and profile details.

9.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. You can update most account details yourself through account settings, or contact customer support for assistance with identity verification documents.

9.3 Right to Deletion

You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when you object to processing. However, we may retain certain data where required by law or for legitimate business purposes such as fraud prevention or dispute resolution.

9.4 Right to Restrict Processing

You may request restriction of processing in certain circumstances, such as when you contest the accuracy of data, when processing is unlawful but you prefer restriction to deletion, or when you need data for legal claims.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider where technically feasible.

9.6 Right to Object

You may object to processing of your personal data for direct marketing purposes at any time by unsubscribing from marketing communications through your account settings or clicking unsubscribe links in promotional emails.

9.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

9.8 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request." We will respond to your request within 30 days and may require verification of your identity before processing the request. If we cannot fulfill your request, we will explain the reasons.

10. International Data Transfers

aura88 primarily serves the Indonesian market, and your personal data is processed and stored on servers located within secure data centers. However, some of our service providers, such as cloud hosting companies and game providers, may be located outside Indonesia. When we transfer personal data internationally, we ensure appropriate safeguards are in place, including:

• Contractual obligations requiring third parties to protect data in accordance with international standards.
• Use of secure data transfer mechanisms and encryption during transit.
• Compliance with applicable data protection regulations governing cross-border data transfers.

By using the aura88 Platform, you consent to the transfer of your personal data to jurisdictions that may have different data protection standards than Indonesia, provided such transfers are conducted with appropriate safeguards as described above.

11. Children's Privacy

aura88 is strictly an adults-only platform. We do not knowingly collect personal information from individuals under 21 years of age. Account registration requires users to confirm they are at least 21 years old, and we verify age through government-issued identification during KYC procedures. If we become aware that a user under 21 has provided personal information, we will immediately suspend the account, delete the data, and return any funds to the source after investigation. Parents or guardians who believe their child has registered an account should contact us immediately at [email protected].

12. Changes to This Privacy Policy

aura88 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on our website with a revised "Last Updated" date.
• Sending email notification to your registered email address for significant changes.
• Displaying a prominent notice on the Platform informing users of the update.

Your continued use of the aura88 Platform after changes become effective constitutes acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how aura88 handles your personal data, please contact us through the following channels:

• Email: [email protected] (Subject: Privacy Inquiry)
• Live Chat: Available 24/7 through the aura88 Platform
• WhatsApp: +62 812-3456-7890 (24/7 support)

For data protection inquiries specifically related to your privacy rights, please address correspondence to our Data Protection team using the subject line "Data Protection Request" to ensure prompt routing to the appropriate department.

We aim to respond to all privacy-related inquiries within 30 days and will work diligently to address your concerns. For additional information about our services, please visit our FAQ page or review our Terms & Conditions.