Privacy Policy

The following terms carry specific meanings throughout this Privacy Policy. Understanding them will help you interpret your rights and our obligations accurately.

ari03 acts as the data controller for all Personal Data collected through the Platform. This means we determine the purposes for which your data is collected and the manner in which it is processed. Where we engage Third-Party Processors, those parties act under our instruction and are contractually bound to handle your data only for the specific purposes we define.

ari03 is an internationally operated online gaming platform serving players primarily across Indonesia, including major cities such as Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, and Makassar. All data processing activities are conducted in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

ari03 collects Personal Data across several distinct categories depending on how you interact with the Platform. The table below provides a comprehensive overview:

ari03 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data (beyond the identity photograph required for KYC), health data, or data concerning sexual orientation. If any such data is incidentally disclosed in a support communication, it will not be stored beyond the resolution of the relevant matter.

ari03 collects Personal Data through the following mechanisms:

• Direct submission: Information you actively provide when completing the registration form, submitting KYC documents, setting up payment methods, or contacting our support team.
• Automated technical collection: Data gathered automatically through server logs, Cookies, pixel tags, and similar technologies when you visit or interact with the Platform — including IP address, device fingerprint, and browser metadata.
• Transactional records: Financial and gaming activity data generated as a natural by-product of deposits, withdrawals, wagers, and game sessions.
• Third-party verification services: Identity and document verification data returned to ari03 by our KYC processing partners after you submit identity documents. We receive a structured verification result, not access to the raw documents stored on the third-party's infrastructure beyond the period required to complete verification.
• Payment processors: Transaction confirmation data from Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja), confirming the status and amount of deposit or withdrawal instructions.

ari03 processes your Personal Data only where a clear, legitimate purpose exists and a recognised legal basis applies. The table below sets out our primary processing activities:

Where processing is based on your consent — specifically, for receiving promotional communications about bonuses, seasonal offers (such as Idul Fitri, Ramadhan, or Indonesian Independence Day promotions), or new product launches — you may withdraw that consent at any time by adjusting your notification preferences in your Account dashboard or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

ari03 shares Personal Data only in the following circumstances and only to the minimum extent necessary for the stated purpose:

1. Payment Processors: We transmit your name, bank account number or e-wallet identifier, and transaction amount to the relevant Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) or e-wallet platform (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to execute the deposit or withdrawal instruction you initiated.
2. KYC & Identity Verification Partners: We share the identity documents you upload (KTP, passport, SIM, proof of address, selfie) with our authorised KYC verification partner to confirm your identity and age (21+) prior to your first withdrawal. These partners are contractually prohibited from using your documents for any purpose other than completing the verification for ari03.
3. Cloud Infrastructure & Hosting: The Platform operates on secure cloud infrastructure. Our hosting provider processes Technical and Usage data on our behalf, subject to strict data processing agreements and security standards equivalent to those described in Section 9.
4. Game Technology Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymised session data (e.g., bet amounts, game outcomes) for the purpose of RNG auditing, game integrity verification, and jackpot pool calculations. No directly identifying Personal Data (name, bank details, ID number) is shared with game providers.
5. Legal and Regulatory Authorities: ari03 will disclose Personal Data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts of competent jurisdiction when required by a valid legal obligation, court order, or enforcement notice. We will notify affected Players of such disclosures where legally permitted to do so.
6. Business Transfers: In the event of a merger, acquisition, or sale of all or a substantial portion of ari03's business assets, Personal Data held by ari03 may be transferred to the acquiring entity. Affected Players will be notified by email and via an in-Platform notification no fewer than 14 days before such a transfer takes effect, with the option to close their Account if they do not consent to the transfer.

ari03 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or for such longer period as is required by applicable legal, regulatory, or compliance obligations. Our standard retention periods are as follows:

When a retention period expires and no overriding legal obligation requires continued storage, ari03 will securely delete or irreversibly anonymise the relevant data using methods that prevent reconstruction or re-identification. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical analysis and Platform improvement purposes.

ari03 uses Cookies and similar client-side tracking technologies to operate the Platform efficiently and to understand how Players interact with our interface. The following categories of Cookies are in use:

• Strictly Necessary Cookies: These are essential for the Platform to function. They maintain your authenticated login session, remember your language preference, and protect against cross-site request forgery (CSRF). These Cookies cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies: These collect anonymised information about which pages are visited most frequently, how long Players spend on each section, and where errors occur. This data is used exclusively to improve Platform performance and user experience. No personally identifying data is contained in these analytics payloads.
• Functional Cookies: These remember your display preferences, responsible gaming tool settings, and certain account customisation choices between sessions, reducing the need to re-enter preferences on each visit.
• Security Cookies: Used to detect and prevent fraudulent login attempts, multi-account activity, and bot-driven interactions. These Cookies store a device fingerprint hash — not raw device data — and are integral to our fraud prevention system.

ari03 does not use third-party advertising or retargeting Cookies. We do not permit external ad networks to place tracking Cookies on the Platform. If you wish to control Cookie behaviour, you may adjust settings in your browser; however, disabling strictly necessary Cookies will prevent you from logging in to your account.

ari03 takes data security seriously and has implemented a layered set of technical and organisational measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and ari03 servers is encrypted using TLS 1.2 or higher. The ari03.bet domain is HTTPS-only; unencrypted HTTP requests are automatically redirected.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts using an OTP (one-time password) delivered via SMS or authenticator app. ari03 staff will never ask you to share an OTP over live chat, email, or WhatsApp.
• Access Controls: Internal access to Player Personal Data is restricted on a strict need-to-know basis. Customer support agents can view only the data necessary to resolve your query. Financial data is further restricted to the payments and compliance teams. All internal data access is logged and subject to regular audit.
• Data Encryption at Rest: Stored Personal Data — including KYC documents, financial records, and identity information — is encrypted at rest using AES-256 encryption on ari03's production databases.
• Intrusion Detection & Monitoring: ari03 operates continuous security monitoring systems that flag anomalous access patterns, brute-force login attempts, and unusual data export events in real time. Alerts are reviewed by our security operations team around the clock.
• Penetration Testing: ari03 commissions independent penetration testing of the Platform and its infrastructure at least once per calendar year, with critical findings remediated within 14 days of the test report.

Despite these measures, no online system can guarantee absolute security. In the event of a data breach that materially affects your Personal Data, ari03 will notify affected Players within 72 hours of becoming aware of the breach, detailing the nature of the incident, the data involved, the steps ari03 has taken to contain it, and the recommended actions you should take to protect your account.

As a data subject, you hold the following rights in relation to your Personal Data held by ari03. To exercise any of these rights, please contact our Data Protection Officer (DPO) at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid, verified request.

1. Right of Access: You may request a copy of all Personal Data ari03 holds about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared.
2. Right to Rectification: If any of your Personal Data is inaccurate or incomplete, you may request that it be corrected. You may also update certain details directly via your account settings panel without contacting support.
3. Right to Erasure ("Right to be Forgotten"): You may request that ari03 delete your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (for consent-based processing), or where the data has been processed unlawfully. Note that erasure requests may be declined in full or in part where retention is required by law — for example, where AML regulations mandate a five-year retention of transaction records.
4. Right to Restriction of Processing: You may request that ari03 suspend the processing of your data in specific circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed.
5. Right to Data Portability: For data processed on the basis of your consent or for contract performance, you may request that ari03 provide your Personal Data in a structured, commonly used, machine-readable format (such as JSON or CSV) so that you may transfer it to another service provider.
6. Right to Object: You may object at any time to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring. ari03 will cease processing unless compelling legitimate grounds that override your interests can be demonstrated.
7. Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

If you are a parent or guardian and believe that a minor under your care has registered on the ari03 Platform or provided their personal information to us, please contact our support team immediately at [email protected]. We will investigate the matter promptly and take all necessary steps to remove the minor's data from our systems in accordance with our obligations.

ari03 employs age verification as a mandatory step of the KYC process, requiring government-issued photographic identification (Indonesian KTP, international passport, or SIM) to confirm that every withdrawal-eligible account holder is 21 years of age or older.

The ari03 Platform does not contain outbound hyperlinks to third-party websites. However, in the event that the Platform is accessed via a referring affiliate domain or that promotional materials reference external resources, ari03 bears no responsibility for the privacy practices, data collection activities, or security standards of any website or service operated by a third party.

Each third-party website or service you visit operates under its own, separate privacy policy. We strongly advise you to review the privacy policy of any external service before submitting personal information to it. ari03's Privacy Policy applies solely to data collected via the ari03.bet Platform.

ari03 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent in-Platform notification to all logged-in Players for a period of no fewer than 14 days following the change.
• Send an email notification to the registered email address on file for active accounts where the change materially affects the rights or obligations of Players.

Your continued use of the ari03 Platform following the posting of a revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree to the revised policy, you must cease using the Platform and request account closure by contacting our support team.

We recommend bookmarking this page and reviewing it periodically, even in the absence of a notification, to stay informed of how ari03 manages your data.

ari03 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and handling all data-related enquiries and rights requests. You may contact the DPO through any of the following channels:

• Email: [email protected] — use subject line "Privacy / Data Rights Request" for the fastest routing to the DPO team. Responses within 5 business days for general enquiries; within 30 calendar days for formal data rights requests.
• 24/7 Live Chat: Available directly within the ari03 platform after login. Ask to speak with the Data Protection team for privacy-specific matters.
• WhatsApp: +62 812 0000 0303 (display only — for general support enquiries during 08:00–23:00 WIB; not for transmitting sensitive documents).

For responsible gaming-related data matters — such as requesting data associated with a self-exclusion period, or reviewing the deposit limit history on your account — please visit the Responsible Gaming page or ask specifically to speak with our responsible gaming team via live chat.

For any matter relating to the accuracy, completeness, or deletion of your account data, please also refer to the Terms & Conditions for the full contractual context governing your account and your rights as a Player on the ari03 Platform.