At air168, protecting your personal data is a core operational responsibility — not an afterthought. This Privacy Policy explains precisely what information we collect, why we collect it, how we use and store it, who we share it with, and what rights you hold as a player registered on the air168 platform.
These highlights summarise the key points of our privacy practices. They do not replace the full policy text below, which contains the complete and binding provisions.
We collect identity data (name, date of birth, KTP number), contact data (email, mobile number), financial data (bank account details, transaction history), and technical data (IP address, device type, session logs) necessary to operate the platform.
Your data is used for account management, KYC identity verification, fraud prevention, payment processing, responsible gaming compliance, customer support, and — where you have consented — marketing communications. We do not use your data for any other purpose.
Data is shared only with trusted service providers — payment processors (BCA, BRI, OVO, DANA, and others), KYC verification partners, fraud detection systems, and licensed game studios — under strict data processing agreements. We do not sell your data.
All data in transit is encrypted using TLS 1.3. Data at rest is encrypted using AES-256. Access to player records is restricted to authorised personnel on a need-to-know basis, with full audit logging of all access events.
You have the right to access, correct, and request deletion of your personal data, subject to legal retention requirements. You may also withdraw marketing consent at any time, request a data portability export, and object to certain processing activities.
Account and transaction data is retained for a minimum of five years after account closure to comply with international anti-money-laundering (AML) obligations. Marketing data is deleted promptly upon withdrawal of consent.
Important: By registering an account on air168 or by continuing to use the platform after this policy's effective date, you acknowledge that you have read and understood this Privacy Policy and agree to the processing of your personal data as described herein.
air168 ("we", "us", "our") operates the online gaming and sportsbook platform accessible at air168.bio. We are committed to protecting the privacy and personal data of every player who registers on, visits, or interacts with our platform. This Privacy Policy has been drafted to be transparent, specific, and easy to understand — reflecting our belief that players have an unconditional right to know how their personal information is handled.
This policy applies to all personal data collected via the air168 website, mobile-optimised site, live chat support system, and any other channel through which you interact with air168. It covers players based in Indonesia and any other jurisdiction from which air168 accepts registrations.
This Privacy Policy should be read alongside the air168 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference and together form the full framework governing your relationship with air168.
The following terms carry specific meanings within this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably identify a living individual, directly or indirectly — including name, identity card number, email address, device identifiers, and financial account details. |
| "Processing" | Any operation performed on personal data, including collection, storage, retrieval, use, disclosure, transmission, erasure, or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data — in this context, air168 is the Data Controller for all player personal data. |
| "Data Processor" | A third party that processes personal data on behalf of air168 under a written data processing agreement — for example, KYC verification providers and payment processors. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose. |
| "KTP" | Kartu Tanda Penduduk — the Indonesian National Identity Card issued to Indonesian residents. |
| "KYC" | Know Your Customer — the identity verification process required by air168 before withdrawal access is granted. |
air168 collects the following categories of personal data:
3.1 Identity Data
3.2 Contact Data
3.3 Financial Data
3.4 Technical & Usage Data
3.5 Communications Data
air168 does not collect or store full card numbers, CVV codes, or internet banking passwords. Payment card data is handled exclusively by our PCI-DSS-compliant payment processor partners and is never transmitted to or stored by air168's own servers.
air168 collects personal data through the following channels:
air168 processes personal data on the following legal bases:
| Legal Basis | Processing Activities Covered |
|---|---|
| Contract performance | Account creation, payment processing, game access, and withdrawal settlement — all necessary to deliver the services you have contracted with air168 to receive. |
| Legal obligation | KYC identity verification, AML transaction monitoring, age verification (21+ enforcement), and record retention obligations. |
| Legitimate interests | Fraud prevention, platform security monitoring, responsible gaming profiling, and general platform improvement — subject to a balancing test confirming these interests do not override your privacy rights. |
| Consent | Marketing emails, promotional SMS messages, and non-essential analytical cookies. You may withdraw consent for these activities at any time without affecting our ability to provide core platform services. |
air168 uses your personal data for the following specific purposes:
air168 does not use your personal data for automated individual decision-making that produces legal or similarly significant effects, except for fraud detection systems operating under human oversight. If you believe you have been adversely affected by an automated decision, contact support to request a human review.
7.1 Service Providers. air168 shares personal data with a limited set of vetted third-party service providers who process data on our behalf under written data processing agreements that impose confidentiality, security, and use-limitation obligations equivalent to those in this policy. Categories of service providers include:
7.2 Legal Disclosure. air168 may disclose personal data to regulatory bodies, law enforcement agencies, financial intelligence units, or courts when required to do so by applicable law, court order, or regulatory directive. In such cases, air168 will disclose only the minimum information necessary to satisfy the legal obligation.
7.3 No Sale of Data. air168 does not sell, rent, or trade personal data to third parties for their independent marketing purposes under any circumstances.
7.4 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of air168's assets, player personal data may be transferred to the successor entity as part of the transaction. Players will be notified prior to any such transfer, and the successor entity will be required to honour the commitments in this Privacy Policy.
air168 operates as an internationally managed platform. Your personal data may be processed on servers or by service providers located outside Indonesia. Where such transfers occur, air168 ensures that appropriate safeguards are in place — including standard contractual clauses, data processing agreements that require equivalent levels of data protection, and technical security measures consistent with those applied to data processed within Indonesia.
Specifically, the game studios supplying content to air168 (Pragmatic Play, Evolution Gaming, PG Soft, and others) are incorporated and operate in various international jurisdictions. Player session data shared with these studios is limited to what is technically required to render the game and is governed by data processing agreements that prohibit secondary use of that data.
air168 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:
While air168 implements industry-standard security controls, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for notifying air168 immediately if you suspect unauthorised access to your account.
air168 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to minimum retention periods required by law. The following retention schedule applies:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity and KYC documents | 5 years after account closure | AML / legal obligation |
| Financial transaction records | 5 years after account closure | AML / legal obligation |
| Game play and bet history | 3 years after account closure | Dispute resolution / legitimate interest |
| Support and communication logs | 2 years after last interaction | Dispute resolution / legitimate interest |
| Marketing consent and opt-out records | Duration of consent + 3 years | Legal obligation (proof of consent) |
| Technical / server access logs | 90 days (rolling) | Security monitoring / legitimate interest |
| Cookie data (analytical) | Up to 13 months | Consent |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised, the resulting aggregate data may be retained indefinitely for statistical and platform improvement purposes.
air168 uses cookies and similar tracking technologies to operate the platform, maintain your login session, and — with your consent — to analyse usage patterns for platform improvement. The categories of cookies used are as follows:
You may manage cookie preferences through your browser settings. Blocking essential cookies will affect the functionality of the air168 platform. Analytical cookies may be opted out of without affecting your ability to play, deposit, or withdraw.
As a player on the air168 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact air168 via live chat or at the support email address listed in Section 16.
Request a copy of all personal data air168 holds about you, along with information about how it is processed.
Request correction of inaccurate or incomplete personal data held on your account — for example, a misspelled name or outdated contact details.
Request deletion of your personal data where it is no longer necessary, consent has been withdrawn, or processing is unlawful — subject to legal retention obligations.
Request that air168 temporarily halt processing of your data while a rectification request or objection is being assessed.
Receive a structured, machine-readable export of the personal data you provided to air168, to transfer to another service provider of your choice.
Object to processing based on legitimate interests — including profiling for responsible gaming — where you believe your rights override air168's interests.
air168 will respond to all rights requests within thirty (30) days of receipt. Where a request is complex or voluminous, the response period may be extended by a further sixty (60) days with notice provided to you before the initial deadline expires.
The air168 platform is strictly intended for adults aged 21 years and over. air168 does not knowingly collect personal data from individuals under the age of 21. Age verification is a required step in the KYC process, and accounts where the registered player is found to be underage will be immediately closed, with all deposited funds returned to the originating payment method.
If you believe that a person under the age of 21 has registered an account on air168 or has provided their personal data to air168 in any context, please contact support immediately so that we may investigate and, if confirmed, delete the relevant data and close the account.
The air168 platform does not contain links to third-party websites as a general rule. However, game studios embedded within the platform (such as Pragmatic Play, Evolution Gaming, and PG Soft) operate their own software environments, which are subject to those studios' own privacy practices regarding game session data. air168 is not responsible for the privacy practices of third-party game studios beyond what is governed by the data processing agreements in place between air168 and those studios.
air168 is not responsible for the privacy practices of Indonesian banks (BCA, BRI, BNI, Mandiri, and others) or e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). Their handling of your financial data is governed by their own privacy policies and applicable Indonesian financial services regulations.
air168 reserves the right to update this Privacy Policy at any time to reflect changes in legal requirements, operational practices, or the services we provide. Where a change is material — meaning it affects the scope of data collected, the purposes for which it is used, or the rights available to players — air168 will provide at least fourteen (14) days' advance notice by publishing a prominent notice on the platform and, where practical, sending a notification to players' registered email addresses.
The effective date shown at the top of this document reflects the date from which the current version of the policy applies. Your continued use of the air168 platform after the effective date of any revision constitutes your acknowledgement of the updated policy. If you object to any changes, you should cease using the platform and submit a data deletion request in accordance with Section 12.
Archived versions of previous iterations of this Privacy Policy are available upon written request to the support team.
For any privacy-related enquiry, rights request, or complaint regarding the handling of your personal data by air168, please contact us using the following channels:
If you are not satisfied with air168's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection or supervisory authority in your jurisdiction.
air168 protects your privacy with bank-grade encryption and transparent data practices. Log in to your account, explore our live casino, sportsbook, and slots — all with fast Rupiah deposits via BCA, BRI, OVO, and DANA. 21+ only. Play responsibly.