Privacy Policy

1. Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, date of birth, email address, mobile number, IP address, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, deletion, or destruction.
• "Data Controller" means asi200, the entity that determines the purposes and means of Processing Personal Data collected via the Platform.
• "Data Processor" means any third-party service provider that Processes Personal Data on behalf of asi200 under a contractual arrangement.
• "KYC Data" means identity verification documents and information submitted by Users as part of the Know Your Customer process, including copies of Indonesian National ID (KTP) and associated selfie photographs.
• "Cookies" means small text files stored on a User's device by a web browser, used to retain session information, preferences, and analytics data.
• "Platform" means the asi200 website, mobile-optimized interface, and all associated digital services accessible at https://asi200.cam.

2. Scope & Application

This Policy applies to all Personal Data collected from individuals who:

• Visit or browse the asi200 Platform, regardless of whether they create an account;
• Register as a User and create an account on asi200;
• Make deposits, place bets, or engage in any transactional activity on the Platform;
• Contact asi200 customer support via email or live chat;
• Participate in promotions, surveys, or feedback programmes operated by asi200.

This Policy does not apply to third-party websites or services that may be referenced or linked from the Platform. asi200 is not responsible for the privacy practices of such third parties and encourages Users to review their respective privacy policies independently.

3. Data We Collect

asi200 collects the following categories of Personal Data:

3.1 Identity & Contact Data

• Full legal name (as it appears on your Indonesian National ID / KTP)
• Date of birth and age confirmation
• Residential address (city, province, postal code)
• Email address
• Indonesian mobile phone number

3.2 Identity Verification (KYC) Data

• Scanned or photographed copy of Indonesian National ID (KTP)
• Selfie photograph taken alongside the KTP document
• KTP ID number (NIK)

3.3 Financial Data

• Bank account name, bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), and account number — for deposit an d withdrawal processing
• USDT (TRC-20) wallet address — where applicable
• Transaction history, including deposit amounts, withdrawal amounts, and timestamps
• Currency denomination (IDR or USDT equivalent)

3.4 Gaming & Behavioural Data

• Betting history, game session records, wager amounts, and outcomes
• Bonus and promotion usage records
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
• Platform interaction logs (pages visited, features accessed, time spent per session)

3.5 Technical & Device Data

• IP address and approximate geolocation (city/region level)
• Device type, operating system, and browser version
• Unique device identifiers
• Session tokens and authentication logs
• Cookie and tracking data (see Section 10)

3.6 Communications Data

• Records of correspondence with asi200 customer support via email or live chat
• Feedback, complaints, and dispute records
• Marketing preference settings and opt-in/opt-out records

4. How We Collect Data

asi200 collects Personal Data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, or contacting our support team.
• Automated collection: Technical and device data collected automatically when you access the Platform via Cookies, server logs, and analytics tools.
• Third-party sources: Identity verification data cross-checked against public records or third-party KYC verification service providers; fraud-screening data from anti-money-laundering (AML) screening services.
• Payment providers: Transaction confirmation data received from Indonesian bank partners and the TRC-20 blockchain network to verify deposit and withdrawal completion.

5. Purposes of Processing

The following table summarises the primary purposes for which asi200 Processes your Personal Data:

6. Legal Basis for Processing

asi200 relies on one or more of the following legal bases when Processing your Personal Data:

• Contract Performance: Processing necessary to fulfil the agreement between you and asi200 — including account management, transaction processing, and delivery of gaming services.
• Legal Obligation: Processing required to comply with applicable anti-money-laundering (AML) regulations, age verification requirements, and other legal or regulatory obligations applicable to the Platform's international licensing framework.
• Legitimate Interest: Processing carried out for purposes that are in asi200's or Users' legitimate interests, provided those interests are not overridden by your data protection rights. This includes fraud detection, security monitoring, responsible gaming analytics, and Platform improvement.
• Consent: Where we rely on your consent — for example, for optional marketing communications — you may withdraw that consent at any time by contacting us at [email protected] or adjusting your account notification preferences. Withdrawal of consent does not affect the lawfulness of Processing carried out before withdrawal.

7. Data Sharing & Disclosure

7.1 Service Providers (Data Processors)

asi200 engages vetted third-party service providers to assist with Platform operations. These providers access only the minimum Personal Data required to perform their contracted function and are bound by strict confidentiality and data protection obligations. Categories of service providers include:

• Identity verification and KYC technology providers
• Payment processing partners (Indonesian bank networks, USDT/TRC-20 infrastructure providers)
• Anti-fraud and AML screening services
• Customer support platform providers
• Cloud hosting and data storage infrastructure providers
• Cybersecurity and penetration testing firms

7.2 Legal & Regulatory Disclosure

asi200 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, legal process, or regulatory directive. We will, where legally permitted, notify affected Users of such disclosures.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of asi200's business assets, Personal Data held by asi200 may be transferred to the acquiring entity, subject to the same data protection obligations set out in this Policy. Affected Users will be notified prior to any such transfer taking effect.

7.4 What We Do Not Do

8. Data Retention

asi200 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The following general retention periods apply:

• Account and identity data: Retained for the duration of the account relationship, plus 5 years following account closure, to satisfy AML record-keeping requirements.
• KYC documents: Retained for 5 years from the date of verification or from account closure, whichever is later.
• Transaction records: Retained for 5 years from the date of each transaction.
• Customer support communications: Retained for 2 years from the date of the last interaction, unless a dispute requires extended retention.
• Technical and device logs: Retained for 12 months from the date of collection.
• Marketing preference records: Retained for 3 years from the date of last consent or opt-out action.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with asi200's data destruction protocols.

9. Your Data Rights

As a User of the asi200 Platform, you hold the following rights in respect of your Personal Data. To exercise any of these rights, contact us at [email protected]. We will respond within 30 calendar days of receiving a verifiable request.

10. Cookies & Tracking Technologies

10.1 What We Use

The asi200 Platform uses the following types of cookies and similar tracking technologies:

• Strictly Necessary Cookies: Essential for the Platform to function correctly — including session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, display options, and last-visited pages, to personalise your experience on return visits.
• Analytics Cookies: Used to collect aggregated, anonymised data on how Users navigate the Platform — including pages visited, session duration, and click patterns — to help us improve the Platform's performance and usability.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot traffic, and account takeover attacks.

10.2 Managing Your Cookie Preferences

You may configure your browser to refuse some or all cookies, or to alert you when a website sets a cookie. Please be aware that disabling strictly necessary cookies will impair the functionality of the asi200 Platform, and you may be unable to log in or complete transactions. Analytics and functional cookies may be disabled without affecting core Platform access.

11. Security Measures

asi200 implements a comprehensive, layered security programme to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational measures include:

• 256-bit SSL/TLS encryption across all data transmissions between your device and our servers.
• AES-256 encryption at rest for all Personal Data and financial records stored in our database infrastructure.
• Multi-factor authentication (MFA) available to all Users for account login protection.
• Role-based access controls restricting internal staff access to Personal Data on a strict need-to-know basis.
• Continuous intrusion detection and real-time security monitoring across all Platform infrastructure.
• Regular penetration testing and third-party security audits conducted by independent cybersecurity firms.
• Secure data destruction protocols for the permanent deletion of data at the end of its retention period.

While asi200 takes every reasonable precaution to safeguard your data, no online system can guarantee absolute security against all potential threats. Users are encouraged to use strong, unique passwords and to enable MFA on their accounts.

12. Minors & Age Protection

The asi200 Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect Personal Data from individuals under the age of 21. During account registration and KYC verification, we take active steps to confirm that all Users meet this age requirement.

If asi200 becomes aware that Personal Data has been collected from an individual under 21 without appropriate parental or guardian verification, we will immediately suspend the associated account, delete the collected data, and — where appropriate — refer the matter to the relevant authorities. Parents and guardians who believe their child may have registered on the Platform should contact us immediately at [email protected].

13. International Data Transfers

As an internationally operated Platform, asi200 may transfer certain Personal Data to servers and service providers located outside Indonesia. Where such transfers occur, asi200 ensures that appropriate safeguards are in place to protect your data, including:

• Data processing agreements incorporating internationally recognised standard contractual clauses;
• Transfer only to jurisdictions that maintain data protection standards equivalent to or exceeding those under which the data was originally collected;
• Regular review of cross-border data flows to ensure ongoing compliance with applicable data protection requirements.

14. Third-Party Services & Links

The asi200 Platform integrates third-party game content from studios including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Pocket Games Soft. These studios may collect limited technical data (such as session IDs and device type) directly through their game interfaces for the purposes of game delivery and fairness verification. Such data collection is governed by the respective studio's own privacy policies, and asi200 is not responsible for those practices.

The Platform does not contain links to external third-party websites. If any such link is ever introduced in a future version of the Platform, this Policy will be updated accordingly, and Users will be advised that asi200 bears no responsibility for the content or privacy practices of external sites.

15. Policy Amendments

asi200 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. Where changes are material, we will notify registered Users by email and display a prominent notice on the Platform at least 7 days before the amended Policy takes effect. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree to the amended terms, you must discontinue use of the Platform and request account closure as described in the Terms & Conditions.

16. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how asi200 has handled your Personal Data, please contact our Data Privacy team through the following channel:

• Email: [email protected]
• Subject line: Include "Privacy Request" or "Data Complaint" in your subject line for prioritised routing.
• Response time: We aim to acknowledge all privacy-related requests within 3 business days (WIB) and to resolve them within 30 calendar days.

If you are not satisfied with our response to your complaint, you may have the right to refer the matter to a relevant supervisory authority or data protection regulator in your jurisdiction.