at789 Privacy Policy

1. Introduction

This Privacy Policy applies to all personal data collected, processed, and stored by at789 (referred to throughout as "at789", "we", "us", or "our") in connection with the operation of the online gambling platform accessible at https://at789.bio. This policy applies to all registered players, prospective players who visit the at789 platform, and any individuals who interact with at789's customer support team.

at789 takes its obligations regarding personal data seriously. This policy has been written to be clear and readable — not deliberately obscured in legal language. If any section is unclear, you are encouraged to contact the at789 support team for clarification before submitting personal data to the platform.

This Privacy Policy should be read alongside the at789 Terms & Conditions, which govern the broader relationship between at789 and its players. By using the at789 platform, you confirm that you have read and accepted both documents.

2. Data Controller

For the purposes of applicable data protection law, at789 acts as the Data Controller in respect of personal data collected through the https://at789.bio platform. As Data Controller, at789 is responsible for determining the purposes and means by which personal data is processed and for ensuring that such processing is conducted lawfully, fairly, and transparently.

All enquiries relating to this Privacy Policy, requests to exercise your data rights, or concerns about how at789 handles your personal data should be directed to the at789 Data Protection contact using the details set out in Section 16 of this policy.

3. Data We Collect

3.1 Registration and Account Data

When you create an at789 account, we collect the following personal data as part of the registration process:

• Full legal name
• Date of birth (to verify that you are at least 21 years of age)
• Email address
• Mobile telephone number
• Residential address (city, province, country)
• Chosen username
• Account password (stored in encrypted, hashed form — at789 personnel cannot access your plain-text password)

3.2 Identity Verification (KYC) Data

In accordance with our Know Your Customer (KYC) obligations, at789 may collect and process the following identity documents and associated data:

• Indonesian National Identity Card (KTP) — including the ID number, full name, date of birth, and photograph
• Passport (for non-KTP verification scenarios)
• Proof of residential address (e.g., utility bill, bank statement)
• Proof of payment method ownership (e.g., screenshot of e-wallet account in your name, bank statement header)
• Selfie photograph for liveness verification, where required

3.3 Financial Transaction Data

at789 records all financial transactions conducted through the platform, including:

• Deposit amounts, timestamps, payment method identifiers, and transaction reference numbers
• Withdrawal amounts, timestamps, destination payment method identifiers, and processing status
• Account balance history
• Bonus credit and wagering activity records

3.4 Betting and Gaming Activity Data

at789 maintains complete records of all gambling activity conducted through a registered account, including:

• Sports bets placed (event, selection, odds, stake amount, result)
• Casino game sessions (game title, session duration, stakes, outcomes)
• Slot game play history
• Esports betting records
• Live dealer game session logs

3.5 Technical and Device Data

at789 automatically collects certain technical data when you access the platform, including:

• IP address
• Device type, operating system, and browser type/version
• Session timestamps (login time, session duration, logout time)
• Pages and features accessed within the platform
• Geolocation data derived from IP address (country and city level — at789 does not access GPS-level device location)

3.6 Customer Support Communications

When you contact at789 customer support — via live chat, email, or any other supported channel — we retain records of those communications, including your messages, the support agent's responses, timestamps, and any attachments or documentation you submit. These records are used to resolve your enquiry, improve support quality, and maintain an audit trail of account-related interactions.

4. How We Collect Your Data

at789 collects personal data through the following mechanisms:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or interact with any feature of the at789 platform that requires you to submit information.
• Automatically: Technical and device data (as described in Section 3.5) is collected automatically when you access the at789 platform through standard web server logging and analytics processes.
• From payment providers: When you make a deposit or withdrawal, at789 receives transaction confirmation data from the relevant payment provider (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, or other supported channels). at789 does not store full bank account numbers or e-wallet passwords.
• From identity verification services: Where at789 uses third-party KYC verification partners to assist with identity document checking, those partners may provide at789 with a verification result and associated confidence score alongside the submitted document data.

5. Use of Personal Data

at789 uses your personal data for the following purposes:

Purpose	Data Used
Account registration and management	Registration data, username, contact details
Age verification and eligibility confirmation (21+)	Date of birth, KYC documents
Identity verification (KYC compliance)	KTP, passport, proof of address, selfie
Processing deposits and withdrawals	Financial transaction data, payment method identifiers
Fraud detection and prevention	IP address, device data, transaction patterns, betting activity
Anti-money laundering (AML) monitoring	Financial transaction data, account activity history
Customer support and dispute resolution	Support communications, account data, transaction records
Responsible gaming monitoring and intervention	Betting activity, session data, deposit/loss patterns
Platform security and technical maintenance	IP address, device data, session logs
Service improvement and analytics	Anonymised or aggregated usage data
Sending transactional communications (account alerts, withdrawal confirmations)	Email address, mobile number
Sending promotional communications (where you have opted in)	Email address, mobile number, game preference data

at789 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review being available. Where automated systems flag an account for review (e.g., for suspected fraud or AML concerns), a trained at789 team member will review the flag before any account action is taken.

6. Legal Basis for Processing

at789 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide you with the at789 platform services you have registered to use — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable legal requirements, including KYC/AML obligations, age verification requirements, and cooperation with lawful regulatory or law enforcement requests.
• Legitimate interests: Processing necessary for at789's legitimate business interests, including fraud prevention, platform security, service improvement, and responsible gaming monitoring — where those interests are not overridden by your data protection rights.
• Consent: For processing activities that are not required for contract performance or legal compliance — in particular, the sending of promotional marketing communications — at789 relies on your freely given, specific, and informed consent. You may withdraw consent for marketing communications at any time by contacting at789 support.

7. Data Sharing & Disclosure

at789 does not sell your personal data to third parties. at789 does not share your personal data with advertisers or data brokers. Your data is shared only in the circumstances described below, and only to the extent necessary for each stated purpose.

7.1 Payment Providers

To process your deposits and withdrawals, at789 shares the minimum necessary transaction data with the relevant Indonesian payment provider — BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, or LinkAja. The data shared is limited to what those providers require to execute the transaction (e.g., account reference, transaction amount, timestamp). at789 does not share your full personal profile or gambling activity with payment providers.

7.2 Identity Verification Partners

Where at789 uses third-party KYC verification technology to assist with document checking, your submitted identity documents and associated data are shared with that verification partner for the sole purpose of returning a verification result to at789. at789 selects KYC partners that maintain appropriate data security standards and contractually restricts those partners from using your data for any purpose other than the specific verification task.

7.3 Game Studios and Content Providers

Game studios and live casino providers (including Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, Microgaming, and others integrated into the at789 platform) may receive session-level data necessary to deliver their games — such as a session token, stake amount, and game outcome. These providers do not receive your full personal profile, contact details, or payment information.

7.4 Legal and Regulatory Disclosure

at789 may disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory directive. at789 will comply with lawful data disclosure requests and will notify affected players of such disclosures where legally permitted to do so.

7.5 Business Transfers

In the event that at789 undergoes a merger, acquisition, restructuring, or sale of all or part of its business, personal data held by at789 may be transferred to the acquiring or successor entity as part of that transaction. at789 will provide advance notice to registered players of any such transfer that materially affects how their personal data is handled.

8. Third-Party Services

The at789 platform integrates third-party technology services to support its operation. These include payment gateway infrastructure, identity verification technology, live game streaming providers, and platform analytics tools. Each such third party is selected on the basis of their data security practices and is bound by contractual data processing terms that restrict their use of at789 player data.

at789 is not responsible for the privacy practices of external websites that may be linked to or from the at789 platform. Players should review the privacy policies of any third-party websites they visit independently of the at789 platform.

9. Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. at789 uses cookies and similar technologies (including local storage and session identifiers) to maintain your logged-in session, remember your platform preferences, and collect anonymous usage data for service improvement purposes.

9.2 Types of Cookies Used by at789

• Strictly necessary cookies: Required for the at789 platform to function. These include session authentication cookies that keep you logged in during a browsing session. Without these cookies, the platform cannot operate correctly. These cookies cannot be disabled.
• Functional cookies: Used to remember your platform preferences — such as your preferred display language, last-visited game category, or notification settings. These cookies improve your experience but are not essential to platform operation.
• Analytics cookies: Used to collect anonymised data about how players navigate the at789 platform — including which pages are visited most frequently, where players encounter errors, and how long sessions last. This data is used in aggregate to improve platform design and performance. No individually identifiable data is captured through analytics cookies.

9.3 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent the at789 platform from functioning correctly and will effectively prevent you from logging in or placing bets. Instructions for managing cookies in major browsers are available through each browser's help documentation.

10. Data Retention

at789 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following general retention principles apply:

• Active account data: Retained for the full duration of the player's account with at789, plus a minimum of five (5) years following account closure to satisfy AML record-keeping requirements.
• KYC verification documents: Retained for a minimum of five (5) years following the completion of the verification process, or five (5) years following account closure, whichever is later.
• Financial transaction records: Retained for a minimum of five (5) years following each transaction, in accordance with international financial record-keeping standards.
• Customer support communications: Retained for three (3) years following the closure of the relevant support interaction, unless associated with an ongoing dispute or legal matter.
• Technical and device logs: Generally retained for ninety (90) days, except where specific records are flagged for retention in connection with a security investigation.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an individual player.

11. Data Security

at789 applies industry-standard technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your browser or device and the at789 platform is encrypted in transit using SSL/TLS protocols.
• Password hashing: Account passwords are stored using one-way cryptographic hashing algorithms. at789 personnel do not have access to your plain-text password.
• Access controls: Access to player personal data within at789's systems is restricted to personnel who require that access to perform their job functions, and is subject to role-based access controls and audit logging.
• Payment data isolation: Full bank account numbers and e-wallet credentials are not stored by at789. Payment processing is handled through tokenised interfaces with certified payment providers.
• Security monitoring: at789 operates continuous security monitoring of its platform infrastructure to detect and respond to potential intrusion attempts, anomalous access patterns, and other security events.

While at789 takes data security seriously and maintains robust protective measures, no online system can guarantee absolute security against all possible threats. Players are encouraged to use strong, unique passwords for their at789 accounts and to contact at789 support immediately if they suspect unauthorised access to their account.

12. International Data Transfers

The at789 platform is operated for players primarily located in Indonesia. Personal data collected through the platform may be stored on or processed by servers located outside Indonesia, including in jurisdictions that may have different data protection standards than those applicable in Indonesia.

Where at789 transfers personal data outside Indonesia for processing — for example, to a KYC verification partner or a live casino content provider whose infrastructure is located in another country — at789 takes steps to ensure that appropriate data protection safeguards are in place for that transfer, including contractual data processing terms that require the recipient to handle data in a manner consistent with the standards described in this policy.

13. Your Data Rights

Subject to applicable law and certain conditions, you have the following rights in relation to your personal data held by at789:

• Right of access: You may request a copy of the personal data that at789 holds about you. at789 will provide this information within a reasonable timeframe following receipt of a valid request.
• Right of rectification: You may request that at789 correct any inaccurate or incomplete personal data held about you. For account-level corrections (e.g., contact details), this can often be done directly through your at789 account settings.
• Right of erasure: You may request that at789 delete your personal data. This right is not absolute — at789 may be required to retain certain data for legal, regulatory, or fraud prevention purposes even following an erasure request. Where erasure of all data is not possible, at789 will explain which data is retained and why.
• Right to restrict processing: In certain circumstances, you may request that at789 restrict the processing of your personal data — for example, while the accuracy of data you have disputed is being verified.
• Right to data portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you may request that at789 provide your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where at789 processes your data on the basis of consent — in particular, for marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to the withdrawal.
• Right to object: You may object to processing of your personal data where at789 relies on legitimate interests as the legal basis for that processing. at789 will cease the relevant processing unless compelling legitimate grounds for continuation exist.

14. Minors

The at789 platform is strictly for adults aged 21 years or older. at789 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the account registration process, and at789 reserves the right to request documentary proof of age from any account holder at any time.

If at789 becomes aware that personal data has been collected from a person under the age of 21, that account will be suspended immediately, all associated personal data will be reviewed, and the matter will be handled in accordance with at789's responsible gaming and child protection obligations. If you believe that a minor may have registered on the at789 platform, please contact at789 support immediately.

15. Changes to This Privacy Policy

at789 reserves the right to update or amend this Privacy Policy at any time. Changes may reflect updates to our data processing practices, changes in applicable law, or improvements to how we explain our privacy commitments to players.

Where changes are material — meaning they significantly affect how at789 processes your personal data or the rights available to you — at789 will provide advance notice to registered players via the contact information held on their accounts. The "Effective Date" at the top of this policy will be updated each time a revised version is published. Your continued use of the at789 platform following the effective date of any amendment constitutes your acknowledgement of the revised policy.

16. Contact

For all privacy-related enquiries, data rights requests, or concerns about how at789 handles your personal data, please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the at789 platform after login
• Response time: at789 aims to acknowledge all privacy-related requests within 48 hours and to provide a substantive response within 30 days of receipt.

If you are not satisfied with at789's response to a privacy concern, you may have the right to lodge a complaint with a relevant data protection supervisory authority. at789 encourages players to contact us directly in the first instance so that we have the opportunity to address concerns before any formal escalation.