Privacy Policy — ammo88

This Privacy Policy applies to all personal data processed by ammo88 in connection with the operation of the online betting and gaming platform accessible at https://ammo88.cam (the "Platform"). It covers data collected from all registered members, prospective members who have submitted a registration enquiry, and visitors who interact with the Platform in any capacity.

This Policy should be read alongside the ammo88 Terms & Conditions, which govern your use of the Platform as a whole. By creating an account on ammo88 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein.

ammo88 primarily serves members who are residents of Indonesia. Where specific Indonesian personal data protection regulations apply to our processing activities, we comply with those requirements in addition to internationally recognized data protection standards.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

ammo88 collects the following categories of personal data from its members and platform visitors:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used for mandatory 21+ age verification).
• Indonesian National Identity Card number (NIK) or passport number.
• Current residential address in Indonesia.
• Email address and mobile phone number.

3.2 KYC & Verification Data

• Scanned or photographed copy of your Kartu Tanda Penduduk (KTP), valid Indonesian passport, or equivalent government-issued photo ID.
• Proof of address document (utility bill, official bank statement, or government letter) dated within three months.
• Proof of payment method ownership (e.g., screenshot of BCA, BRI, BNI, Mandiri, or e-wallet account screen confirming your name and account number).
• Liveness check images or video selfie captures where required by our automated KYC system.

3.3 Financial & Transaction Data

• Bank account numbers and registered e-wallet handles (OVO, DANA, GoPay, ShopeePay, LinkAja) used for deposits and withdrawals.
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method references.
• Wagering history — bets placed, games played, outcomes, and net win/loss positions.
• Bonus claims, wagering requirement completion records, and promotional activity history.

3.4 Technical & Device Data

• IP address and approximate geographic location derived from it.
• Device type, operating system, browser version, and unique device identifiers.
• Session logs including login timestamps, pages visited, and actions performed within the Platform.
• Cookie identifiers and local storage values placed on your device during Platform use.

3.5 Communications Data

• Records of all live chat sessions, email correspondence, and support ticket interactions with the ammo88 customer service team.
• Responses to voluntary surveys, promotions, or feedback requests where you have chosen to participate.

ammo88 collects personal data through the following channels and methods:

• Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion, you provide data to us directly through the Platform's interfaces.
• Automated technical collection: When you visit or use the Platform, our servers automatically record technical data including your IP address, browser type, device identifiers, and session activity logs. This occurs regardless of whether you are logged in.
• Cookies and tracking technologies: The Platform uses cookies and similar technologies to manage your session, remember your preferences, analyze usage patterns, and detect fraudulent activity. See Section 11 for full details.
• Third-party payment processors: When you transact through a payment method such as BCA, BRI, BNI, Mandiri, OVO, or DANA, our payment processing partners transmit transaction confirmation data to ammo88 to facilitate settlement. We receive only the data necessary to confirm and record the transaction.
• Identity verification providers: Our KYC process is supported by accredited third-party identity verification services. These providers may process biometric data (liveness checks) on our behalf and return a verification outcome. Raw biometric data is not retained by ammo88 beyond the period required for verification.
• Fraud prevention and security partners: ammo88 works with specialist fraud detection services that may contribute device fingerprint data, behavioral signals, and IP reputation scores to our risk assessment processes. These partners act as data processors under binding contractual agreements.

ammo88 processes your personal data only where a lawful basis exists for doing so. The table below sets out the primary purposes for which we process personal data and the corresponding legal basis in each case:

Where we rely on legitimate interest as our legal basis, we have conducted a balancing assessment to confirm that our interests do not override your fundamental rights and freedoms. You may request a copy of any such assessment by contacting us at [email protected].

Where we rely on consent — in particular for optional marketing communications — you may withdraw that consent at any time by updating your communication preferences within your account dashboard or by contacting our support team. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

ammo88 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose:

• Payment processors and banking partners: To facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja, we transmit the minimum necessary transactional data to each respective payment provider. These providers are independently regulated financial institutions operating under their own privacy frameworks.
• Identity verification providers: KYC document data is shared with our accredited identity verification partners solely for the purpose of performing age and identity checks. These partners are contractually prohibited from using your data for any other purpose.
• Fraud prevention and security services: Technical and behavioral data may be shared with specialist fraud prevention partners to protect the platform and its members from unauthorized access, fraudulent transactions, and account takeover attempts.
• Game software providers: When you play games powered by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft — a session token and pseudonymous player identifier are transmitted to the game server to enable gameplay. No directly identifiable personal data beyond the session token is shared with game providers in the normal course of play.
• Legal and regulatory authorities: ammo88 will disclose personal data to competent governmental, regulatory, judicial, or law enforcement authorities where required to do so by applicable law, court order, or lawful regulatory demand. We will notify affected members of such disclosures to the extent permitted by law.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or a material part of ammo88's business, personal data held by ammo88 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any change to the identity of the data controller within 30 days of the transaction completing.

ammo88 operates globally and some of its service providers — including identity verification partners and game software providers — may be located outside of Indonesia. As a result, your personal data may be transferred to, stored in, or processed in countries other than Indonesia.

Where such international transfers occur, ammo88 takes all reasonable steps to ensure that your personal data receives a level of protection equivalent to that which it receives in Indonesia. These steps may include:

• Transferring data only to countries that have been assessed as providing an adequate level of data protection by recognized international standards.
• Implementing standard contractual clauses or equivalent data transfer mechanisms in agreements with overseas processors.
• Applying additional technical safeguards such as end-to-end encryption for data in transit across jurisdictional boundaries.

By registering an account and using the Platform, you acknowledge and consent to the transfer of your personal data outside of Indonesia in the circumstances and with the safeguards described above.

ammo88 implements a comprehensive, layered security framework to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our key technical and organizational security measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the ammo88 Platform is encrypted in transit using current TLS protocols. HTTP connections are automatically redirected to HTTPS.
• Encryption at rest: Sensitive personal data — including KYC documents, payment account references, and account credentials — is stored using AES-256 encryption on access-controlled infrastructure.
• Access controls: Access to personal data within ammo88's systems is granted on a strict need-to-know basis. All internal access is authenticated, logged, and subject to periodic review. No employee has unrestricted access to member personal data.
• Penetration testing and vulnerability assessments: ammo88 commissions independent security assessments of its platform infrastructure on a regular basis to identify and remediate vulnerabilities before they can be exploited.
• Incident response: ammo88 maintains a documented data breach response procedure. In the event of a confirmed breach that poses a material risk to affected members, we will notify impacted individuals within 72 hours of becoming aware of the incident, and will take all reasonable steps to contain the breach and prevent recurrence.

While ammo88 takes all reasonable precautions, no data transmission over the internet or electronic storage system is entirely free of risk. You are responsible for maintaining the security of your own account credentials and for notifying ammo88 immediately if you suspect unauthorized access to your account.

ammo88 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely and permanently deleted or rendered irreversibly anonymous. Where deletion is not immediately technically feasible (for example, data held in encrypted backup archives), we will isolate the data from active processing and ensure it is deleted at the earliest practicable opportunity.

Members who close their accounts voluntarily may request expedited deletion of personal data that is not subject to a mandatory retention period. Such requests will be assessed and actioned within 30 days, subject to our legal obligations.

As an ammo88 member, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request. We will respond within 30 days of receipt and may ask you to verify your identity before processing the request.

ammo88 uses cookies and similar technologies — including local storage, session tokens, and device fingerprinting — to operate the Platform, enhance your experience, and protect the security of your account. The table below describes the categories of cookies we use and their purposes:

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, although doing so may impair certain Platform features. Strictly necessary and fraud-prevention cookies cannot be disabled without affecting your ability to use the Platform securely.

ammo88 does not use cookies for behaviorally targeted third-party advertising. We do not share cookie-derived data with advertising networks or social media platforms for ad-targeting purposes.

The ammo88 Platform is strictly restricted to individuals aged 21 years or older. We do not knowingly collect personal data from any person under the age of 21. Age verification is mandatory during the account registration and KYC process, and ammo88 employs both automated and manual controls to enforce this restriction.

If ammo88 becomes aware that personal data has been collected from a person under the age of 21 — whether through a fraudulent registration or any other means — we will immediately suspend the associated account, void any outstanding balances, and permanently delete all personal data associated with that account as soon as it is technically practicable to do so.

If you have reason to believe that a minor has registered an account on the ammo88 Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

ammo88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform functionality. The date on which this Policy was most recently updated is displayed prominently at the top of this page.

Where a proposed amendment is material — meaning it significantly affects how we collect, use, or share your personal data — we will notify registered members by email to their registered address and display a notice on the Platform's homepage at least seven days before the revised Policy takes effect.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with an amendment, you must cease using the Platform and close your account before the revised Policy takes effect. You may request deletion of your personal data upon account closure in accordance with Section 9.

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your personal data by ammo88, please contact our dedicated privacy support team using the details below. All communications should be made in English or Bahasa Indonesia.

• Support Email (plain text — not a link): [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the ammo88 Platform.
• Response Time for Data Rights Requests: We will acknowledge your request within 2 business days and provide a substantive response within 30 calendar days.
• Verification: To protect your privacy and prevent unauthorized data disclosures, we will ask you to verify your identity before actioning any data rights request. Verification typically requires confirmation of your registered email address and one additional piece of identifying information.

For responsible gaming support, self-exclusion requests, or concerns about your wagering activity, please visit our dedicated Responsible Gaming page or raise the matter through any of the support channels listed above.