at886 Privacy Policy

1Overview

at886 operates the online gaming platform accessible at https://at886.app and is the data controller responsible for the personal information of all registered Members. at886 is committed to handling your data with the highest standards of care, transparency, and security.

This Privacy Policy applies to all personal data collected through the at886 website, mobile-optimised platform, customer support channels, and any associated communications. It covers Indonesian players and any other individuals who interact with the at886 platform regardless of their location.

at886 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. Data is shared only with the specific service providers and regulatory bodies described in Section 7 of this Policy, and only to the extent necessary to deliver the at886 service to you.

2Definitions

The following definitions apply throughout this Privacy Policy:

• "at886" / "we" / "us" / "our" — the operator of the at886 online gaming platform at https://at886.app.
• "Personal Data" — any information that identifies or could reasonably identify a natural person, either directly or in combination with other data.
• "Member" / "you" / "your" — any individual who has registered an account on the at886 platform or otherwise provided personal data to at886.
• "Processing" — any operation performed on personal data, including collection, storage, use, transmission, and deletion.
• "KYC" (Know Your Customer) — identity and age verification procedures at886 uses to confirm a Member's identity and eligibility before processing withdrawals or granting access to certain features.
• "Cookie" — a small text file placed on your device by the at886 platform to support platform functionality, authentication, and analytics.
• "Third-Party Service Provider" — an external company engaged by at886 to perform a specific function, such as payment processing or fraud detection, under a data processing agreement.

3Data We Collect

at886 collects personal data across several categories depending on how you interact with the platform. The table below summarises the categories of data collected and specific examples within each category:

4How Data Is Collected

at886 collects personal data through the following channels:

• Direct interactions: Data you provide when completing the account registration form, submitting KYC documents, making deposits or withdrawals, contacting support, or updating your account profile.
• Automated technologies: Technical and usage data collected automatically through cookies, web beacons, and server logs each time you access the at886 platform. See Section 10 for full details on cookies.
• Third-party sources: Identity verification data returned by KYC service providers; fraud risk signals from fraud-detection partners; payment confirmation data from bank transfer and e-wallet providers including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Publicly available sources: In limited circumstances, at886 may consult publicly available records to verify account information or investigate a compliance concern.

5Purposes of Processing

at886 processes your personal data only for specific, legitimate purposes. The primary purposes for which your data is used are set out below:

• Account management: Creating, maintaining, and securing your at886 account; authenticating your at886 login sessions; communicating important account-related notices.
• Identity verification (KYC): Confirming your identity and age (21+) before processing withdrawals and as required by our platform compliance obligations.
• Payment processing: Crediting deposits, processing withdrawal requests, and reconciling transaction records in IDR across supported Indonesian banks and e-wallets.
• Service delivery: Providing access to sports betting, live casino, slots, Bandar Q, Dragon Tiger, and all other at886 Services; personalising game recommendations and platform layout to your preferences.
• Responsible gaming: Monitoring betting patterns to identify potential problem gambling behaviour; enforcing deposit limits, time-outs, and self-exclusion requests; upholding the platform's 21+ age restriction.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, bonus abuse, money laundering, multi-accounting, and other prohibited conduct described in the at886 Terms & Conditions.
• Customer support: Responding to your queries, complaints, and requests through live chat and email; maintaining records of support interactions for quality assurance.
• Marketing (where consented): Sending promotional offers, bonus notifications, and platform updates by email or messaging where you have opted in. You may withdraw consent at any time by contacting support.
• Analytics and improvement: Understanding how Members use the platform so that at886 can improve its interface, game selection, and overall player experience.
• Legal and compliance obligations: Meeting any obligations required by applicable law or regulatory guidance, including anti-money-laundering (AML) record-keeping requirements.

6Legal Basis for Processing

at886 processes personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the at886 Member agreement — for example, account creation, payment processing, and service delivery.
• Legitimate interests: Processing undertaken to pursue at886's legitimate business interests, such as fraud prevention, platform security, and analytics, where those interests are not overridden by your data protection rights.
• Legal obligation: Processing required to comply with applicable law, such as KYC verification and AML record-keeping.
• Consent: Processing for optional purposes, such as marketing communications, where you have given explicit, freely withdrawn consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7Data Sharing

at886 does not sell or rent your personal data to any third party. Data is shared only in the following circumstances and only to the extent strictly necessary:

• Payment processors: Your name and registered bank account or e-wallet details are shared with the relevant financial institution (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja) solely for the purpose of executing your deposit or withdrawal transaction.
• KYC and identity verification providers: Identity documents and personal details are shared with third-party KYC service providers under strict data processing agreements to verify your identity and confirm your eligibility to hold an at886 account.
• Fraud detection partners: Technical and transaction data may be shared with fraud-prevention technology providers to identify suspicious activity that could harm you or the platform.
• Game studios: Limited session and gameplay data may be exchanged with licensed game studios (Pragmatic Play, Evolution Gaming, Spribe, Pocket Games Soft, NetEnt, Microgaming) for the purposes of game delivery, fairness auditing, and dispute resolution.
• Legal and regulatory authorities: at886 will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies when required to do so by applicable law, court order, or where at886 determines in good faith that disclosure is necessary to protect the rights, property, or safety of at886 or its Members.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of at886's assets, your personal data may be transferred to the acquiring entity, subject to the same level of protection afforded by this Privacy Policy.

8Data Retention

at886 retains personal data only for as long as necessary to fulfil the purposes for which it was collected or to meet applicable legal retention requirements. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical analysis.

9Security Measures

at886 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your browser and the at886 platform is encrypted in transit using industry-standard SSL/TLS protocols. This applies to all at886 login sessions, deposit flows, and personal data submissions.
• Encrypted data storage: Sensitive personal data, including identity documents and financial account details, is stored in encrypted form on access-controlled servers.
• Access controls: Access to personal data within at886's systems is restricted on a strict need-to-know basis. Staff with access to Member data are required to complete data privacy training and are bound by confidentiality obligations.
• Two-factor authentication (2FA): at886 offers optional two-factor authentication on Member accounts as an additional layer of login security. Members are strongly encouraged to enable 2FA from within their account settings.
• Penetration testing and audits: The at886 platform and its underlying infrastructure undergo regular security assessments, including third-party penetration testing and vulnerability scanning.
• Incident response: at886 maintains a data breach response plan. In the event of a security incident that materially affects your personal data, affected Members will be notified promptly through their registered contact method.

10Cookies & Tracking Technologies

at886 uses cookies and similar tracking technologies to ensure the platform functions correctly, to keep you securely logged in during an at886 login session, and to understand how Members navigate and use the platform. The types of cookies used are as follows:

• Strictly necessary cookies: Essential for the platform to operate. They enable core functions including secure authentication, session management, and page navigation. These cookies cannot be disabled without disrupting your ability to use the platform.
• Functional cookies: Remember your preferences — such as language settings, game layout preferences, and previously entered form data — to provide a more personalised experience across sessions.
• Analytics cookies: Collect aggregated, anonymous data about how Members use the at886 platform, including which pages are visited most frequently and where users encounter difficulties. This data helps at886 improve the platform over time.
• Performance cookies: Monitor platform performance metrics such as page load speed and error rates to ensure the at886 service is delivered reliably across all devices and network conditions.

Strictly necessary cookies are placed on your device as soon as you access the platform and do not require your consent. Functional, analytics, and performance cookies are placed only where you have not opted out through your browser settings. You can manage or disable non-essential cookies at any time via your browser's privacy or cookie settings. Note that disabling functional cookies may affect your platform experience.

11Your Rights

As a Member of the at886 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact at886 support at [email protected] with a clear description of your request. at886 will respond within thirty (30) days.

• Right of access: You may request a copy of the personal data at886 holds about you, along with information about how it is processed.
• Right to rectification: You may request correction of any personal data that is inaccurate or incomplete. For basic profile data (email address, contact number), you can update this directly through your account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where at886 no longer has a legal or legitimate basis to retain it. Note that data subject to mandatory retention obligations (e.g., AML and KYC records) cannot be deleted until the applicable retention period has elapsed.
• Right to restrict processing: You may request that at886 suspend the use of your personal data in specific circumstances — for example, while the accuracy of your data is under review.
• Right to data portability: You may request a copy of personal data you have provided to at886 in a structured, machine-readable format for transfer to another service provider, where technically feasible.
• Right to object: You may object to the processing of your personal data where at886 relies on legitimate interests as its legal basis, or where your data is being processed for direct marketing purposes. Direct marketing opt-outs take effect immediately.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before withdrawal.

12Minors & Age Policy

The at886 platform is strictly intended for adults aged 21 and over. at886 does not knowingly collect, store, or process personal data belonging to any person under the age of 21.

All Members are required to confirm that they are at least 21 years of age during account registration, and at886 may request documentary proof of age at any point. If at886 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, the data will be securely deleted as quickly as our compliance obligations permit, and any funds in the account will be returned to the depositing payment method after verification.

If you believe that a person under the age of 21 has registered an at886 account, please contact us immediately at [email protected].

13Third-Party Links

The at886 platform does not contain links to third-party websites for advertising or referral purposes. Where at886 works with licensed game studios — including Pragmatic Play, Evolution Gaming, Spribe, Pocket Games Soft, NetEnt, and Microgaming — their game interfaces may be delivered within an embedded frame on the at886 platform. In such cases, the game studio's own privacy practices govern any data collected directly by the game engine; at886 is not responsible for the data practices of third-party studios in relation to data collected within their embedded game environments.

at886 recommends that you review the privacy policies of any third-party game studio whose products you use if you have concerns about data collected within those game environments.

14Amendments to This Policy

at886 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When a material change is made — meaning a change that substantively affects your privacy rights or how your data is used — at886 will notify registered Members via a prominent notice on the platform or by direct communication to your registered contact, at least seven (7) days before the amendment takes effect.

The "Effective" date displayed at the top of this document and in the table of contents will be updated with each revision. Continued use of the at886 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree to the revised Policy, you should close your account and withdraw any remaining balance before the amendment takes effect.

15Contact

If you have any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data by at886, please contact our support team through the following channel. All data-related enquiries are handled by at886's dedicated privacy team:

For responsible gaming enquiries — including requests to set deposit limits, activate a time-out, or initiate self-exclusion — please identify the nature of your request clearly in the subject line so it can be routed to the appropriate specialist team without delay. Full information on at886's responsible gaming programme is available on the Responsible Gaming page.