Privacy Policy — arta88

arta88 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who accesses or uses the arta88 platform at https://arta88.cam (the "Platform"). This Privacy Policy sets out how arta88 collects, processes, stores, shares, and protects personal data in connection with the provision of its online gaming and sports betting services.

This policy applies to all registered Players, prospective Players who interact with the Platform without completing registration, and any individuals who contact arta88 through its customer support channels. It applies regardless of the device or connection method used to access the Platform, including desktop browsers, mobile browsers, and any future arta88 mobile application.

This policy should be read alongside the arta88 Terms & Conditions, which govern the overall contractual relationship between arta88 and its Players. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a data privacy matter, this Privacy Policy will prevail.

The following terms carry the meanings assigned to them throughout this Privacy Policy:

• "Personal Data" means any information that identifies or is capable of identifying a living individual, either directly (e.g., full name, email address) or indirectly (e.g., IP address, device identifier, account number).
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure, and destruction, whether automated or manual.
• "Data Controller" means arta88, which determines the purposes and means of processing Personal Data on the Platform.
• "Data Processor" means any third party engaged by arta88 to process Personal Data on its behalf under a data processing agreement.
• "Player" / "Data Subject" means the natural person whose Personal Data is being processed — i.e., any registered or prospective user of the arta88 Platform.
• "Cookies" means small text files placed on your device by the Platform to store session state, preferences, and analytics data.
• "KYC Data" means identity verification documentation submitted by Players including government-issued ID, proof of address, and payment method verification documents.
• "Sensitive Data" means a subset of Personal Data that warrants elevated protection, including government identity document numbers (e.g., Indonesian KTP number), financial account details, and any data that could reveal religious beliefs, health status, or ethnic origin.

arta88 collects the following categories of Personal Data in connection with the operation of the Platform:

arta88 collects Personal Data through the following channels and mechanisms:

4.1 Directly from You

The majority of the personal data arta88 holds is provided directly by you during registration, KYC submission, deposit and withdrawal requests, contact with our support team, and participation in promotions. You choose what information to provide, subject to the minimum requirements for account registration and verification.

4.2 Automatically via the Platform

When you access the arta88 Platform, our servers and analytics systems automatically record technical data including your IP address, device fingerprint, browser type, and session activity. This data is collected passively and is used primarily for security monitoring, fraud detection, and platform performance analysis.

4.3 Via Cookies and Tracking Technologies

The Platform uses cookies and similar technologies to maintain your session state, remember your preferences, and gather anonymized analytics data on Platform usage patterns. Full details of our cookie practices are provided in Clause 11 of this policy.

4.4 From Third-Party Service Providers

In limited circumstances, arta88 may receive Personal Data from trusted third-party service providers, including payment processors that confirm transaction details, identity verification partners that assist with KYC document authentication, and fraud-screening services that provide risk signals associated with specific IP addresses or device identifiers.

arta88 processes Personal Data on the following legal grounds, each of which corresponds to specific processing activities described in this policy:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions, including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering (AML) obligations, KYC requirements imposed by our gaming license, and any data retention mandates under applicable law.
• Legitimate Interests: Processing necessary for arta88's legitimate business interests, including fraud prevention, security monitoring, responsible gaming enforcement, and platform improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where required by applicable law, arta88 will seek your explicit consent before processing Personal Data for specific purposes such as direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

arta88 uses the Personal Data it collects for the following specific purposes:

• Account Management: Creating and maintaining your Player account, authenticating your identity at login, and managing account settings and preferences.
• Payment Processing: Facilitating deposits via local Indonesian payment channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay) and processing withdrawal requests to your verified payment method.
• Identity & Age Verification: Confirming that all Players are at least 21 years of age and that the identity information provided at registration is accurate and verifiable, in accordance with our KYC obligations.
• Fraud Prevention & Security: Detecting and investigating suspicious account activity, unauthorized access attempts, multi-accounting, bonus abuse, and money-laundering patterns.
• Responsible Gaming: Monitoring betting patterns to identify potential problem gambling behaviors, enforcing self-exclusion requests, and administering deposit and loss limits as requested by Players.
• Customer Support: Responding to your inquiries, resolving complaints, and maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Legal & Regulatory Compliance: Meeting our obligations under applicable gaming regulations, AML laws, and any lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve the Platform's functionality, user experience, and game offering.
• Promotional Communications: Sending you information about bonuses, promotions, and seasonal offers — subject to your marketing preferences and applicable consent requirements. You may opt out of marketing communications at any time.

arta88 does not sell your Personal Data to any third party. We may share your data only in the following specific and limited circumstances:

7.1 Service Providers (Data Processors)

arta88 engages carefully selected third-party service providers who process Personal Data on our behalf under binding data processing agreements. These include payment gateway operators, KYC and identity verification platforms, cloud hosting providers, customer support software providers, and fraud detection services. All processors are contractually required to handle your data only as instructed by arta88 and to maintain appropriate security standards.

7.2 Game Content Providers

Third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) may receive limited technical data — such as session tokens and anonymized player identifiers — necessary to deliver their game content within the Platform. These studios are not permitted to use this data for their own marketing purposes.

7.3 Legal and Regulatory Authorities

arta88 will disclose Personal Data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, valid legal process, or where arta88 reasonably believes disclosure is necessary to protect the rights, property, or safety of arta88, its Players, or the public.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of arta88's business assets, Player Personal Data may be transferred to the acquiring entity as part of that transaction. Affected Players will be notified via email and in-platform notice prior to any such transfer, and the acquiring entity will be required to honor the commitments made in this Privacy Policy.

arta88 operates as an international platform and some of the third-party service providers we use may process Personal Data in jurisdictions outside Indonesia. Where such international transfers occur, arta88 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that provided under this policy. These safeguards may include contractual clauses that bind the receiving party to data protection obligations, or reliance on the adequacy of data protection law in the destination jurisdiction as determined by recognized international standards.

Players who wish to obtain further information about the specific safeguards applied to any international data transfer may contact arta88 through the contact details provided in Clause 16 of this policy.

arta88 retains Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active account plus a minimum of five years following account closure, in accordance with standard AML record-keeping requirements.
• KYC Documentation: Retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later, as required under international AML and gaming compliance standards.
• Transaction Records: Retained for a minimum of five years from the date of each transaction to support regulatory reporting, audit, and dispute resolution obligations.
• Customer Support Records: Retained for three years from the date of the interaction, or longer if the subject matter of the interaction is the subject of ongoing legal or regulatory proceedings.
• Marketing Consent Records: Retained for as long as you remain subscribed to marketing communications, plus two years following your opt-out, to demonstrate compliance with consent obligations.
• Technical Logs: Typically retained for 90 days unless a security investigation requires extended retention of specific log entries.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with an identifiable individual.

arta88 implements a multi-layered security framework to protect Personal Data from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Transport Security: All data transmitted between your device and arta88 servers is encrypted using TLS 1.2 or higher with 256-bit encryption keys.
• Data-at-Rest Encryption: Sensitive data stored on arta88 servers — including financial account details and KYC documents — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to systems containing Personal Data is restricted on a need-to-know basis, with role-based permissions, multi-factor authentication for administrative accounts, and detailed access logging.
• Password Security: Player passwords are stored exclusively as salted cryptographic hashes. arta88 staff cannot retrieve your plaintext password at any time.
• Vulnerability Management: arta88 conducts regular security assessments, penetration tests, and code reviews to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: arta88 maintains a documented data breach response plan. In the event of a confirmed breach affecting your Personal Data, you will be notified within 72 hours of arta88 becoming aware of the incident.

arta88 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

11.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They maintain your login session, remember your language and currency preferences, and enable core security features such as CSRF protection. These cookies cannot be disabled without impairing Platform functionality.

11.2 Analytics Cookies

arta88 uses analytics tools to collect anonymized data about how Players navigate and use the Platform. This data helps us identify usability issues, measure feature performance, and improve the overall player experience. Analytics data is aggregated and does not identify individual Players.

11.3 Functional Cookies

Functional cookies remember choices you make — such as your preferred deposit method or game interface settings — so that you do not need to re-enter them on each visit. These cookies enhance convenience but are not strictly required for the Platform to operate.

11.4 Managing Cookies

You may configure your browser to refuse or delete cookies at any time. However, disabling strictly necessary cookies will prevent you from logging in to your arta88 account and accessing Platform services. Instructions for managing cookies in commonly used browsers are available through your browser's help documentation.

As a Data Subject, you hold the following rights with respect to the Personal Data that arta88 processes about you. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Subject Request". arta88 will respond within 30 days of receiving a valid request.

The arta88 Platform is strictly restricted to individuals who are at least 21 years of age. arta88 does not knowingly collect or process Personal Data belonging to individuals under the age of 21. If arta88 discovers or has reasonable grounds to believe that Personal Data has been submitted by a person under 21, the associated account will be suspended immediately, all data will be deleted except as required to document the age-violation event for compliance purposes, and no winnings will be paid.

If you are a parent or guardian and believe that a minor has registered an account on arta88 using your or their own personal details, please contact us immediately at [email protected]. We will investigate and act promptly on any credible report of underage account usage.

The arta88 Platform integrates third-party game content from studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These game providers operate their own software environments within the Platform. While arta88 maintains contractual data protection obligations with all integrated providers, each provider's own privacy practices apply to any data processed directly within their game environments.

The arta88 Platform does not contain links to external third-party websites. Should any future feature of the Platform reference an external resource, this policy will be updated to reflect the data implications of that feature prior to its launch.

arta88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, arta88 will notify registered Players via email and in-platform notification at least 14 days before the amended policy takes effect. The "Last Updated" date at the top of this page will be revised upon each amendment.

Your continued use of the arta88 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you must cease using the Platform and may request account closure by contacting our support team.

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by arta88, please contact our dedicated privacy team through the following channel:

Our Indonesian-speaking support team is available 24 hours a day, 7 days a week, including during Indonesian public holidays such as Idul Fitri and Indonesian Independence Day (17 August). For urgent security concerns — such as suspected unauthorized access to your account — please indicate "URGENT" in your subject line for prioritized handling.