axa88 Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings assigned to them below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data. This includes, but is not limited to, name, date of birth, email address, phone number, payment account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, erasure, or destruction — whether automated or manual.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. For all data processed in connection with the axa88 platform, axa88 is the Data Controller.
• "Data Processor" means a third party that processes Personal Data on behalf of axa88, under documented instruction, for specified purposes only.
• "Member" / "You" refers to any individual who has registered for or uses an axa88 Account.
• "Platform" refers to the axa88 website at axa88.vip, including all associated digital services, features, and content.
• "KYC" refers to Know Your Customer identity verification procedures, including document collection and identity cross-checking, conducted as part of axa88's anti-money laundering compliance obligations.
• "Cookies" refers to small data files placed on your device by the axa88 platform to support session management, functionality, and analytics.

axa88, operating at axa88.vip, is the Data Controller for all Personal Data processed in connection with the axa88 platform. As Data Controller, axa88 is responsible for ensuring that Personal Data is processed lawfully, fairly, and transparently, and that appropriate technical and organizational safeguards are in place to protect the security and integrity of that data.

For all privacy-related inquiries, data subject access requests, and complaints, the axa88 Data Privacy contact is reachable at [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line of your correspondence.

axa88 collects the following categories of Personal Data. We collect only what is necessary for the specific purposes described in this Privacy Policy — no more.

axa88 collects Personal Data through the following channels:

4.1 Directly from You

The majority of Personal Data we hold is provided directly by you during the registration process, when completing KYC verification, when making deposits or requesting withdrawals, and when you contact the axa88 support team via live chat or email. You are under no obligation to provide this data, but without it, axa88 cannot open an Account for you or process financial transactions.

4.2 Automatically via Platform Technology

When you access axa88 from any device, our platform automatically collects Technical Data and Usage Data through server logs, cookies, pixel tags, and similar tracking technologies. This data collection begins from your first visit and continues throughout your use of the platform. For full details of cookies used, see Clause 9.

4.3 From Third-Party Verification Services

To fulfill our KYC and anti-money laundering (AML) obligations, axa88 may use third-party identity verification services to cross-reference the identity documents you submit. These services may return a verification result (pass / refer / fail) along with any flags identified during document review. axa88 uses these results solely for compliance purposes.

4.4 From Payment Processors

When you initiate a deposit or withdrawal using a local Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) or an e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the relevant payment processor confirms transaction completion and provides axa88 with transaction reference data necessary to credit your Account or confirm receipt of a withdrawal. axa88 does not receive or store your full bank account credentials — only the account name, the last four digits of the relevant account number, and the transaction reference.

axa88 processes Personal Data on the following legal bases, each of which applies to the specific processing activities described:

• Contractual Necessity: Processing required to open and manage your Account, process deposits and withdrawals, settle bets, and deliver the services you have requested. Without this processing, axa88 cannot fulfill its contractual obligations to you as a Member.
• Legal Obligation: Processing required to comply with applicable anti-money laundering regulations, Know Your Customer requirements, and international financial crime prevention frameworks. This includes KYC document collection, transaction monitoring, and reporting obligations.
• Legitimate Interests: Processing carried out for axa88's legitimate business interests, including fraud prevention, platform security, abuse detection, business analytics, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms. axa88 conducts a balancing assessment before relying on this basis.
• Consent: Processing for direct marketing communications (promotional emails, bonus notifications, personalized offers) is conducted only where you have given clear, affirmative consent at registration or subsequently via your Account notification settings. You may withdraw marketing consent at any time by adjusting your Account preferences or by contacting axa88 support.

axa88 uses the Personal Data collected for the following specific purposes:

• Account management: Creating, maintaining, and securing your axa88 Account, including authentication, password reset, and session management.
• Transaction processing: Crediting deposits, processing withdrawals, and maintaining an accurate transaction ledger for your Account in IDR.
• Identity verification (KYC): Verifying your age (21+), identity, and payment method ownership before processing your first withdrawal and in response to any subsequent compliance review.
• Fraud prevention and security: Detecting and investigating fraudulent activity, unauthorized Account access, duplicate Account registration, bonus abuse, match-fixing involvement, and money laundering. This includes automated risk-scoring of transactions and behavior patterns.
• Regulatory compliance: Fulfilling axa88's obligations under applicable international anti-money laundering and counter-terrorism financing frameworks, including maintaining transaction records for the required retention periods.
• Service personalization: Tailoring the games displayed, odds highlighted, and promotions offered based on your betting history and platform usage patterns — subject to your consent preferences.
• Customer support: Responding to your inquiries, resolving disputes, and maintaining records of support interactions for quality assurance and audit purposes.
• Responsible Gaming: Monitoring usage patterns to identify potential indicators of problem gambling and, where appropriate, proactively reaching out to Members who may benefit from self-exclusion or deposit-limit tools.
• Platform improvement: Analyzing aggregate, anonymized Usage Data to identify technical issues, improve user experience, and develop new features.
• Marketing communications: Sending promotional emails, bonus notifications, and personalized offers — exclusively to Members who have provided marketing consent.

axa88 does not sell, rent, or trade your Personal Data to third parties for their own marketing or commercial purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary:

7.1 Service Providers (Data Processors)

axa88 engages a small number of carefully selected third-party service providers who process Personal Data on our behalf under written data processing agreements. These processors are permitted to use your data only as instructed by axa88 and for no other purpose. Categories of processors include: cloud infrastructure providers, KYC identity verification vendors, payment gateway operators, live chat software providers, and fraud detection service vendors.

7.2 Game Content Providers

Third-party game studios whose content is integrated into the axa88 platform — including Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, and Spribe — may receive limited Technical Data (such as session tokens and game round identifiers) necessary to deliver the game experience. These providers do not receive your Identity, Contact, or Financial Data through the axa88 integration.

7.3 Legal and Regulatory Disclosure

axa88 may disclose Personal Data to law enforcement agencies, financial intelligence units, regulatory authorities, or courts where required to do so by applicable law, by a valid legal process, or where axa88 reasonably believes disclosure is necessary to prevent serious harm, investigate financial crime, or protect the rights of axa88 or its Members. Where legally permitted, axa88 will notify the affected Member of any such disclosure request.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of axa88's assets, Member Personal Data may be transferred to the successor entity as part of that transaction. In such circumstances, axa88 will provide advance notice to Members and ensure that the successor entity is bound by privacy obligations no less protective than those set out in this Privacy Policy.

axa88 retains Personal Data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Anonymized aggregate data (from which no individual can be identified) may be retained indefinitely for statistical and business analysis purposes.

axa88 uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your login session, and to gather anonymized analytics about how the platform is used. The following categories of cookies are deployed:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They manage your login session, remember your Account state, maintain your active game session, and support security features such as CSRF protection. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred odds format (decimal, fractional, or Malay/Hong Kong format), language display settings, and notification preferences — so you do not need to reconfigure them on each visit.
• Analytics Cookies: axa88 uses privacy-compliant analytics tools to collect aggregated, anonymized data about page visits, feature usage, and navigation paths. This data helps us understand how Members use the platform and where improvements are needed. Individual Members are not personally identifiable from this data.
• Marketing / Retargeting Cookies: These cookies are deployed only where you have given explicit marketing consent. They enable axa88 to measure the effectiveness of promotional campaigns and — where applicable — to present relevant axa88 content across the web. You may withdraw this consent at any time via your Account notification settings.

axa88 implements a layered, defense-in-depth approach to data security. The following technical and organizational measures are in place to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the axa88 platform, including login sessions, payment pages, and live game streams.
• Salted password hashing using industry-standard cryptographic algorithms. axa88 staff cannot view your password in plain text at any time.
• Role-based access controls ensuring that axa88 staff can access only the Personal Data necessary for their specific job function. Access to KYC documents and financial records is restricted to designated compliance and finance personnel.
• Encrypted storage of KYC document images and financial records at rest, using AES-256 encryption on dedicated secure storage infrastructure.
• Continuous intrusion detection and monitoring of the axa88 platform infrastructure, with automated alerts for anomalous access patterns, large-volume data queries, and suspicious login activity.
• Regular third-party security audits and penetration testing of the axa88 platform and its supporting infrastructure. Critical vulnerabilities identified during audits are remediated within 72 hours of identification.
• Staff security training covering data handling procedures, phishing awareness, and incident response — conducted annually for all axa88 personnel with access to Member data.

10.1 Data Breach Response

In the event of a Personal Data breach that poses a risk to the rights and freedoms of affected Members, axa88 will notify affected Members without undue delay and no later than 72 hours after becoming aware of the breach, via the email address registered on their Account. The notification will describe the nature of the breach, the categories and approximate volume of data affected, the likely consequences, and the measures axa88 has taken or proposes to take to address the breach.

As a Member of the axa88 platform, you hold the following rights in respect of your Personal Data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". axa88 will respond to all valid requests within 30 calendar days.

• Right of Access: You may request a copy of all Personal Data axa88 holds about you, together with information about the purposes for which it is processed, the categories of data held, the recipients to whom it has been disclosed, and the retention period applied.
• Right to Rectification: If any Personal Data axa88 holds about you is inaccurate or incomplete, you may request that it be corrected. Identity Data corrections require supporting documentation consistent with the KYC process.
• Right to Erasure: You may request that axa88 delete your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and axa88 has no overriding legitimate interest. Note that this right is subject to axa88's legal retention obligations — data that must be retained under AML or financial record-keeping regulations cannot be erased before the applicable retention period expires.
• Right to Restrict Processing: In certain circumstances (for example, while the accuracy of your data is being verified, or while an objection is being assessed), you may request that axa88 restrict processing of your data to storage only.
• Right to Data Portability: For data processed on the basis of contract or consent, you may request a machine-readable copy of your Personal Data in a structured, commonly used format (CSV or JSON) for transfer to another service provider.
• Right to Object: You may object at any time to processing based on axa88's legitimate interests, including profiling for personalization purposes. You may also withdraw marketing consent at any time via your Account notification settings, with immediate effect.
• Right Not to be Subject to Automated Decision-Making: Where axa88 makes decisions that significantly affect you solely through automated means (for example, automated fraud flags that result in Account suspension), you have the right to request human review of that decision.

The axa88 platform is strictly restricted to persons who are 21 years of age or older. axa88 does not knowingly collect Personal Data from anyone under the age of 21. If axa88 discovers that Personal Data belonging to a person under 21 has been collected — whether through a misrepresentation at registration or through any other means — that data will be permanently deleted and the associated Account will be immediately and permanently closed.

If you are a parent or guardian and believe that a minor under your care has created an axa88 Account or submitted Personal Data to the platform, please contact axa88 support immediately at [email protected]. We will investigate and take appropriate action within 24 hours of receiving your report.

The axa88 platform may display content from or references to third-party services, including game studios such as Pragmatic Play, Evolution Gaming, and PG Soft. While axa88 takes reasonable steps to ensure that its third-party integrations meet applicable security and privacy standards, axa88 is not responsible for the privacy practices of any third-party website or service that you access independently. This Privacy Policy applies solely to data processed by axa88 in connection with the axa88 platform. We encourage you to review the privacy policies of any third-party services you interact with directly.

axa88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or the scope of our services. The "Last updated" date at the top of this page will always reflect the date of the most recent revision.

Where a change is material — meaning it meaningfully alters how we collect or use your Personal Data — axa88 will notify you by email to the address registered on your Account at least 14 days before the change takes effect. Non-material changes (such as typographical corrections or clarifications that do not alter the substantive content of the policy) take effect immediately upon publication. Continued use of the axa88 platform following notification of a material change constitutes your acceptance of the updated Privacy Policy.

For any questions, concerns, or requests relating to this Privacy Policy or to the Personal Data axa88 holds about you, please contact the axa88 Data Privacy team through the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line. Written responses are delivered within 30 calendar days of receipt.
• Live Chat: Available 24/7 via the chat widget on the axa88 platform. For privacy-related queries that require investigation or documentation, we recommend following up in writing by email to ensure an accurate and auditable record.

axa88 is committed to resolving all privacy-related concerns promptly and fairly. If you are not satisfied with our response to a data rights request or complaint, you may escalate the matter to the relevant international data protection supervisory authority in the jurisdiction where your complaint originates.