ayahqq is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard information provided by Members and visitors to our Platform.
Last Updated: 1 January 2026 | Effective Date: 1 January 2026
The following terms, when used in this Privacy Policy, carry the meanings defined below:
ayahqq acts as the Data Controller for all Personal Data collected from Members and visitors through the Platform. As Data Controller, ayahqq determines why and how your Personal Data is processed, and bears primary responsibility for ensuring that Processing complies with applicable data protection principles and this Privacy Policy.
ayahqq operates under an international gaming licence and adheres to internationally recognised data protection standards, including principles derived from the General Data Protection Regulation (GDPR) framework, as a baseline for privacy practice — even where local Indonesian law may not yet require identical standards. We believe that robust data protection is a fundamental right of every user, regardless of jurisdiction.
Data Controller Contact: For all privacy-related enquiries, data subject rights requests, or complaints, please contact our Data Protection Officer at: [email protected]. All enquiries are acknowledged within 2 business days and fully responded to within 30 calendar days.
ayahqq collects Personal Data through several channels: directly from you when you register, interact with the Platform, or contact support; automatically when you browse or use the Platform; and from third-party service providers involved in payment processing, KYC verification, and fraud prevention. The categories of Personal Data we collect are described below.
Sensitive Data: ayahqq does not intentionally collect Sensitive Data (as defined in Section 1) unless strictly required by law or with your explicit written consent. If you believe Sensitive Data has been included in a communication to us inadvertently, please notify us immediately so it can be securely deleted.
ayahqq processes your Personal Data on the following legal bases, depending on the purpose of Processing:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract (you cannot use our Services without an Account) |
| Processing deposits and withdrawals | Performance of contract; legal obligation (AML compliance) |
| Identity verification (KYC) | Legal obligation under international AML/KYC standards |
| Fraud prevention and account security | Legitimate interests of ayahqq and its Members |
| Responsible gaming monitoring | Legal obligation; legitimate interests (player protection) |
| Sending transactional communications | Performance of contract |
| Sending marketing and promotional offers | Consent (you may withdraw consent at any time) |
| Analytics and Platform improvement | Legitimate interests of ayahqq |
| Compliance with regulatory requests | Legal obligation |
ayahqq uses the Personal Data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent or establishing a new legal basis.
We use your registration data to create and maintain your Account, authenticate your identity on login, process your in-platform preferences, and communicate important account-level updates such as password resets, security alerts, and policy change notifications.
Financial transaction data is used to process deposits and withdrawals via your nominated Indonesian bank accounts (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), to maintain accurate account balance records, and to generate transaction histories available to you within your Member dashboard.
KYC data is processed to verify that you are the rightful Account holder, to confirm that you are 21 years of age or older, to satisfy our obligations under international anti-money laundering (AML) frameworks, and to detect and prevent fraudulent or criminal activity. We may share KYC data with authorised third-party verification service providers operating under strict data-processing agreements.
Technical and usage data — including IP address, device fingerprint, login patterns, and betting behaviour — is analysed by automated systems and our security team to detect account takeover attempts, multi-account abuse, bonus fraud, collusion, and other patterns consistent with prohibited conduct. Where suspicious activity is confirmed, we may restrict or suspend access and share relevant data with law enforcement or regulatory bodies as required by law.
ayahqq monitors wagering patterns, session durations, deposit frequency, and self-declared limits to identify Members who may be exhibiting signs of problem gambling. Where such indicators are identified, our responsible gaming team may proactively reach out to offer support tools, including deposit limits, session timers, reality-check alerts, and self-exclusion. This monitoring is conducted in the genuine interest of Member welfare and is not used for commercial profiling.
Communications data — including live chat transcripts, email records, and complaint submissions — is retained to provide consistent, informed support across interactions; to train and quality-assure our support agents; and to maintain a complete record of dispute resolution processes for audit and regulatory purposes.
With your consent, we may use your email address and mobile number to send promotional offers, bonus announcements, seasonal campaigns (such as those tied to Indonesian Independence Day, Idul Fitri, or Nyepi), and personalised recommendations based on your gaming preferences. You may withdraw marketing consent at any time by clicking "Unsubscribe" in any promotional email or by contacting support. Withdrawal of marketing consent does not affect your ability to use the Platform or receive transactional communications.
Aggregated and anonymised usage data is used to understand how Members navigate the Platform, which game categories are most popular, and where usability improvements can be made. This data cannot be used to identify individual Members and is processed under ayahqq's legitimate interests in continuous service improvement.
ayahqq does not sell, rent, or trade your Personal Data to any third party for their independent commercial purposes. We share your data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.
We share financial transaction data with payment processors and banking partners — including Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) — solely to execute deposits and withdrawals you have initiated. These entities act as Data Processors under contractual terms that restrict their use of your data to payment facilitation only.
Your identity documents and biometric selfie data may be shared with licensed third-party KYC verification providers. These providers verify document authenticity and perform liveness checks using automated technology. All KYC partners are bound by strict data-processing agreements and are prohibited from using your data for any purpose other than identity verification on behalf of ayahqq.
When you play games supplied by third-party studios — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft — limited technical identifiers (such as an anonymised player ID and session token) are shared with the relevant studio's game servers to facilitate gameplay. These studios do not receive your name, contact details, or financial information.
We may share Technical Data (IP address, device fingerprint, behavioural signals) with specialist fraud-detection and cybersecurity partners who assist us in identifying and blocking threats to Platform integrity. These partners process data exclusively on our instruction and under binding data-processing agreements.
ayahqq may disclose your Personal Data to governmental authorities, law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or regulatory directive. We will, where legally permissible, notify affected Members of such disclosure requests prior to compliance.
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of ayahqq's assets, your Personal Data may be transferred to the acquiring or successor entity as part of that transaction. You will be notified of any such transfer and of any material changes to data processing practices that result from it, in advance of the transfer taking effect.
No Sale of Data: ayahqq does not and will never sell your Personal Data to advertisers, data brokers, or any other commercial third party for independent marketing or profiling purposes. Our only revenue source is gaming activity conducted on the Platform.
ayahqq uses cookies and similar tracking technologies (including web beacons and local storage) on the Platform to enable core functionality, improve user experience, and support security and analytics operations. By continuing to use the Platform, you consent to the use of cookies in accordance with this section.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens, responsible gaming tool state | Session / up to 24 hours |
| Functional | Remembering language preference, game lobby layout, last-visited category, notification settings | Up to 12 months |
| Analytics | Tracking page views, session duration, navigation flow, and feature usage to improve Platform design | Up to 24 months |
| Security | Device fingerprinting for fraud detection, bot identification, and account takeover prevention | Up to 6 months |
You may control and delete cookies through your browser settings at any time. Most modern browsers allow you to block third-party cookies, clear existing cookies, or receive a notification before a new cookie is stored. Please note that disabling strictly necessary cookies will impair Platform functionality and may prevent you from logging into your Account or placing bets. Disabling functional cookies will remove personalisation features. Analytics and security cookies can be disabled without affecting core gameplay, though doing so may reduce the effectiveness of our fraud-detection systems.
ayahqq retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, to satisfy our legal and regulatory obligations, to resolve disputes, and to enforce our agreements. The specific retention periods applicable to each category of data are as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of Account + 5 years post-closure | AML obligations; dispute resolution |
| KYC identity documents | Duration of Account + 5 years post-closure | Regulatory compliance; AML audit trail |
| Financial transaction records | Duration of Account + 7 years post-closure | AML; tax and financial audit requirements |
| Betting and game history | Duration of Account + 3 years post-closure | Dispute resolution; responsible gaming monitoring |
| Support communications | 3 years from last interaction | Quality assurance; dispute history |
| Analytics and usage logs | 24 months, then anonymised indefinitely | Platform improvement; aggregated reporting |
| Marketing consent records | Until withdrawal of consent + 2 years | Evidence of consent for regulatory purposes |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised using industry-standard data destruction methods. Anonymised data — from which no individual can be identified — may be retained indefinitely for statistical and research purposes.
ayahqq implements a comprehensive, multi-layered data security framework designed to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to, the following:
Your Responsibility: While ayahqq employs robust technical and organisational security measures, no system is entirely impervious to risk. You are responsible for maintaining the confidentiality of your Account credentials and for logging out of shared devices. If you suspect your Account has been accessed without your authorisation, contact our support team immediately via live chat.
As a Member of ayahqq, you are entitled to the following rights with respect to your Personal Data. To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within 30 calendar days.
You have the right to request a copy of all Personal Data that ayahqq holds about you. We will provide this in a structured, commonly used, machine-readable format (JSON or CSV) within 30 days of a verified request. One copy is provided free of charge per 12-month period; subsequent requests within the same period may incur a reasonable administrative fee.
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor updates (such as email address or phone number) can be made directly in your Account settings; changes to identity-linked data (name, date of birth) require submission of supporting documentation.
You may request the deletion of your Personal Data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and no other legal basis for processing exists; (c) you object to processing and there are no overriding legitimate interests; or (d) the data has been processed unlawfully. Please note that erasure requests are subject to our legal obligations — we are required to retain certain data (particularly KYC and financial records) for regulatory periods as set out in Section 8, and those records cannot be deleted before their mandatory retention period expires.
You may request that we restrict the processing of your Personal Data in specific circumstances — for example, while a rectification request is being assessed, or where you have objected to processing and a determination of legitimate interests is pending. Restricted data is stored but not actively processed beyond storage.
Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your Personal Data in a structured, machine-readable format and to transmit that data to another controller without hindrance.
You have the right to object at any time to the processing of your Personal Data for direct marketing purposes. Upon receipt of such an objection, we will immediately cease processing your data for marketing. You also have the right to object to processing based on legitimate interests; in this case, we will assess whether our interests override your rights and inform you of the outcome.
ayahqq uses automated systems for fraud detection, responsible gaming monitoring, and account risk scoring. Where an automated decision produces a significant legal or similarly significant effect on you (such as account suspension), you have the right to request human review of that decision, to express your point of view, and to contest the outcome. Contact support to request a human review of any automated decision affecting your Account.
ayahqq operates globally and may transfer your Personal Data to servers, Data Processors, and service providers located in countries outside Indonesia. Where such transfers occur, ayahqq takes appropriate safeguards to ensure that your Personal Data receives a level of protection equivalent to that provided under this Privacy Policy. Safeguards include:
By using the Platform and providing your Personal Data, you acknowledge and consent to these international transfers on the terms described in this section.
21+ Only: The ayahqq Platform is strictly intended for adults aged 21 and over. We do not knowingly collect Personal Data from persons under the age of 21. If we discover that a Member is under 21, we will immediately suspend the Account, delete all associated Personal Data (except records required for regulatory compliance), and refund any net deposits to the payment method of origin.
Parents and guardians who believe a minor has registered an Account or accessed the Platform must contact our support team immediately at [email protected]. We will investigate and act promptly on all such reports. ayahqq supports the use of third-party parental control software and internet filtering tools to prevent minors from accessing online gambling services.
The Platform may reference or integrate with third-party services — such as game studios, payment gateway interfaces, and live streaming providers — whose privacy practices are governed by their own privacy policies, independent of this document. ayahqq is not responsible for the data practices of any third-party service, even where that service is integrated into or accessible through the Platform.
We recommend reviewing the privacy policies of any third-party provider with whom you interact in connection with your use of ayahqq's Services. If you have concerns about a third-party integration's data practices, please contact our support team and we will endeavour to provide relevant information or contact details for the relevant third party.
ayahqq reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When we make material changes, we will notify active Members by email (to the address registered on your Account) and via a prominent in-platform notification at least 14 calendar days before the changes take effect.
The "Last Updated" date displayed at the top of this page will always reflect the date of the most recent version. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform following the effective date of any updated version constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised terms, you may close your Account in accordance with Section 12.1 of the Terms & Conditions.
For non-material changes — such as typographical corrections, clarifications that do not alter your substantive rights, or updates required by law — we may update this Policy without advance notice, though the "Last Updated" date will still be revised accordingly.
For all privacy-related enquiries, requests to exercise your data subject rights, or concerns about how ayahqq handles your Personal Data, please contact our Data Protection Officer using the details below. All contact information is provided as plain text and is not a clickable link.
If you are dissatisfied with ayahqq's response to a privacy concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. For Indonesian residents, the relevant body is the Ministry of Communication and Information Technology (Kominfo). Details of how to file a complaint are available on the Kominfo official website.
The six pillars of ayahqq's commitment to protecting your personal data
Every byte of data transmitted between your device and ayahqq is protected by bank-grade SSL/TLS encryption. Your information travels safely, every time.
ayahqq does not sell, rent, or trade your personal data to advertisers or data brokers — ever. Your information is used only to deliver and improve the Services you use.
Access, correct, export, or delete your personal data at any time. We respond to all verified data subject rights requests within 30 calendar days — no runaround.
We collect identity documents solely for regulatory compliance and player protection. KYC data is processed by certified verification partners and never used for commercial profiling.
We keep your data only as long as legally required, then delete it securely. Retention periods are published openly in this Policy — no indefinite data hoarding.
In the unlikely event of a security incident affecting your data, we commit to notifying you within 72 hours of confirmed discovery — proactively and transparently.
Our Data Protection Officer is available around the clock to address your data concerns. You can also review our full Terms & Conditions or visit the FAQ for quick answers about how ayahqq handles your account and personal information.