Privacy Policy

At ada168, we treat your personal data with the same care and discretion we apply to every aspect of our platform. This Privacy Policy explains precisely what we collect, why we collect it, how we use it, and the rights you hold over your own information.

Effective Date: January 1, 2026

Data Protection First

All personal data collected by ada168 is stored on encrypted servers with industry-standard SSL protection. We do not compromise on the security of your information.

No Data Sales

ada168 never sells, rents, or trades your personal data to third-party advertisers or data brokers — ever. Your information is used solely to operate and improve your gaming experience.

You Control Your Data

You have the right to access, correct, and request deletion of your personal data at any time. Submit a request to our support team and we will respond within 30 days.

Encrypted Transactions

Every financial transaction processed through BCA, BRI, BNI, Mandiri, and our other Indonesian banking partners is secured with end-to-end encryption.

Minimal Data Collection

We collect only the data that is strictly necessary to verify your identity, process your transactions, and comply with international anti-money-laundering requirements.

Marketing Opt-Out

Promotional communications are entirely optional. You may unsubscribe from marketing emails at any time through your account settings without affecting your ability to use the platform.

1

Introduction

This Privacy Policy ("Policy") describes how ada168 ("we", "us", "our") collects, uses, discloses, stores, and protects the personal information of individuals ("you", "your", "User") who access or use the ada168 platform available at https://ada168.cam ("Platform").

ada168 operates as an internationally licensed online gaming and sports betting platform serving players across Indonesia, including users in Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, and beyond. We are committed to handling your personal data responsibly, transparently, and in accordance with internationally recognised data-protection principles.

By creating an account, accessing the Platform, or otherwise engaging with our services, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any provision of this Policy, you should discontinue use of the Platform and contact us to arrange account closure.

Scope of this Policy: This Policy applies to all personal data processed by ada168 in connection with the Platform, including data collected through our website, mobile interface, customer-support channels, and third-party payment processors operating on our behalf.

2

Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

Term Meaning
"Personal Data" Any information relating to an identified or identifiable natural person, including name, contact details, financial information, and device identifiers.
"Processing" Any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
"Controller" ada168, the entity that determines the purposes and means of processing your Personal Data.
"Processor" A third party that processes Personal Data on behalf of ada168 under a data-processing agreement.
"KYC" Know Your Customer — the identity and age-verification process required under international anti-money-laundering standards.
"Cookies" Small text files placed on your device by the Platform to store session information, preferences, and analytics data.
"Data Breach" A security incident resulting in the accidental or unlawful destruction, loss, alteration, or unauthorised disclosure of Personal Data.
3

Personal Data We Collect

ada168 collects only the categories of Personal Data that are necessary for the purposes described in this Policy. The categories we collect are as follows:

3.1 Identity and Contact Data

  • Full legal name as it appears on your government-issued identity document.
  • Date of birth (required to verify that you are at least 21 years of age).
  • Residential address in Indonesia.
  • Email address and mobile phone number.
  • Copies of identity documents submitted during KYC verification, such as your National Identity Card (KTP) or passport.

3.2 Financial Data

  • Bank account details associated with deposits and withdrawals (institution name, account number, and account holder name — e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga).
  • Transaction history including deposit amounts, withdrawal requests, and bonus credits, all denominated in Indonesian Rupiah (IDR / Rp).
  • Payment verification records required for anti-money-laundering compliance.

3.3 Technical and Usage Data

  • IP address, device type, operating system, and browser type.
  • Session data including login timestamps (recorded in WIB, UTC+7), pages visited, games played, and betting history.
  • Geolocation data at the country or city level, derived from your IP address.
  • Cookie and tracking data as described in Clause 11.

3.4 Communication Data

  • All communications you send to ada168 customer support, including email correspondence, live-chat transcripts, and support tickets.
  • Feedback, survey responses, and complaint records.
  • Records of any promotional preferences or marketing opt-out requests.

3.5 Behavioural and Responsible Gaming Data

  • Gameplay patterns, betting frequency, and session durations monitored for responsible-gaming risk assessment.
  • Self-exclusion requests, deposit limits, and time-out settings you configure on your account.
4

How We Collect Personal Data

Personal Data is collected through the following channels:

  • Directly from you: When you register an account, submit KYC documents, make deposits or withdrawal requests, contact customer support, or adjust your account settings.
  • Automatically during use: Technical and usage data is collected automatically through cookies, server logs, and analytics tools whenever you access or interact with the Platform.
  • From third-party payment processors: Financial institutions and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) transmit transaction confirmation data to ada168 to verify deposits and process withdrawals.
  • From identity-verification services: Third-party KYC providers may perform document authentication and age verification on our behalf during the account-approval process.
5

Purpose of Processing

ada168 processes your Personal Data for the following specific purposes:

  1. Account Creation and Management: To create, maintain, and authenticate your account; to process login requests; and to enable access to platform features including slots, live casino games, sports betting markets, and togel (Indonesia's traditional lottery).
  2. KYC and Age Verification: To verify that you are at least 21 years of age and to comply with international anti-money-laundering and counter-terrorism-financing regulations.
  3. Transaction Processing: To process deposits via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja); to execute withdrawal requests; and to track bonus credits and promotional offers.
  4. Customer Support: To respond to your enquiries, resolve complaints, and provide technical assistance. All support interactions are logged for quality-assurance purposes.
  5. Responsible Gaming: To monitor gameplay patterns for signs of problem gambling; to enforce deposit limits, session time alerts, cool-off periods, and self-exclusion requests; and to fulfil our duty of care under responsible-gaming obligations.
  6. Platform Security and Fraud Prevention: To detect and prevent fraudulent activity, multi-accounting, bonus abuse, collusion, and other violations of our Terms and Conditions.
  7. Legal Compliance: To comply with applicable laws, regulations, court orders, and requests from law-enforcement or regulatory authorities.
  8. Marketing and Promotions: To send promotional emails, bonus offers, and product updates where you have consented to receive such communications. You may opt out at any time.
  9. Analytics and Service Improvement: To analyse usage trends, measure marketing campaign performance, and continuously improve the Platform's performance, design, and user experience.
7

Data Sharing and Disclosure

ada168 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may, however, share your data with the following categories of recipients under strict data-processing agreements:

7.1 Service Providers and Processors

  • Payment processors and financial institutions that facilitate deposits and withdrawals (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, and their respective payment gateways).
  • Identity-verification and KYC service providers that authenticate your submitted documents.
  • Cloud-hosting and data-storage providers that securely store Platform data on encrypted servers.
  • Customer-support software providers that enable ticketing, live chat, and email management.
  • Analytics and marketing-automation platforms used to measure campaign effectiveness and Platform performance.

7.2 Game Studios and Sports Data Providers

  • Third-party game developers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) receive anonymised gameplay data necessary to operate their games on the Platform.
  • Sports betting odds providers and data feeds require limited technical data to deliver live scores and market updates.

7.3 Legal and Regulatory Authorities

  • Law-enforcement agencies, courts, regulators, or government bodies where disclosure is required by law, court order, or regulatory directive.
  • Anti-money-laundering authorities and financial-intelligence units where suspicious transaction activity is detected.

7.4 Business Transfers

In the event of a merger, acquisition, sale of assets, or other corporate restructuring, your Personal Data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

Cross-Border Transfers: Some service providers and processors may be located outside Indonesia. Where data is transferred internationally, ada168 ensures that appropriate safeguards are in place, including standard contractual clauses and data-processing agreements that meet internationally recognised data-protection standards.

8

Data Retention

ada168 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations. Specific retention periods are as follows:

  • Active Accounts: Personal Data is retained for the entire duration that your account remains active on the Platform.
  • Closed Accounts: Following account closure or self-exclusion, identity and transaction data is retained for a minimum of seven (7) years to comply with international anti-money-laundering and financial-reporting regulations.
  • Marketing Data: Where you have opted out of marketing communications, your email address is retained on a suppression list to ensure you do not receive further promotional content.
  • Technical and Usage Data: Server logs, IP addresses, and session data are typically retained for up to two (2) years unless required for ongoing fraud investigations or legal proceedings.

At the end of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be associated with you as an individual.

9

Security Measures

ada168 employs industry-standard technical and organisational security measures to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Sensitive data at rest is stored using AES-256 encryption.
  • Access Controls: Personal Data is accessible only to authorised employees, contractors, and processors who require access to perform their job functions. All access is logged and audited.
  • Secure Data Centres: Our hosting infrastructure uses geographically distributed, ISO 27001-certified data centres with physical access controls, fire suppression, and redundant power systems.
  • Regular Security Audits: ada168 conducts periodic penetration testing, vulnerability assessments, and code reviews to identify and remediate potential security weaknesses.
  • Incident Response: In the event of a Data Breach, ada168 will notify affected Users and relevant authorities within 72 hours of detection, in accordance with applicable breach-notification requirements.

While we take every reasonable precaution to protect your data, no system is entirely immune to security threats. You are responsible for maintaining the confidentiality of your login credentials and for notifying us immediately if you suspect unauthorised access to your account.

10

Your Data Protection Rights

Under internationally recognised data-protection principles, you hold the following rights in relation to your Personal Data:

Right of Access

You may request a copy of all Personal Data ada168 holds about you.

Right to Rectification

You may request correction of any inaccurate or incomplete Personal Data.

Right to Erasure

You may request deletion of your Personal Data, subject to legal retention obligations.

Right to Restrict Processing

You may request that we limit how we use your Personal Data in certain circumstances.

Right to Data Portability

You may request a machine-readable copy of your data to transfer to another service.

Right to Object

You may object to processing based on legitimate interests or for direct marketing.

To exercise any of these rights, please contact our Data Protection Officer using the contact details provided in Clause 15. We will respond to your request within thirty (30) calendar days. Where a request is manifestly unfounded, excessive, or repetitive, we may charge a reasonable administrative fee or decline the request in accordance with applicable law.

11

Cookies and Tracking Technologies

ada168 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyse usage patterns, and deliver personalised content. Cookies are small text files stored on your device that enable the Platform to remember your preferences and session state.

Types of Cookies We Use:

  • Essential Cookies: Required for the Platform to function correctly, including session management, authentication, and security features. These cannot be disabled without affecting Platform functionality.
  • Performance Cookies: Collect anonymised data about how you use the Platform, such as pages visited and time spent on each page, allowing us to identify performance issues and improve load times.
  • Functional Cookies: Remember your preferences, such as language settings, currency display, and favourite games, to provide a more personalised experience on return visits.
  • Marketing Cookies: Track your activity across sessions to measure the effectiveness of promotional campaigns and deliver targeted offers. These cookies require your consent.

Managing Cookies:

You may control and delete cookies through your browser settings. Most browsers allow you to refuse cookies entirely, accept only certain types, or receive a notification before a cookie is stored. Note that disabling essential cookies may impair your ability to use certain Platform features. Instructions for managing cookies in popular browsers can be found at:

  • Google Chrome: Settings > Privacy and Security > Cookies
  • Mozilla Firefox: Preferences > Privacy & Security > Cookies and Site Data
  • Safari: Preferences > Privacy > Manage Website Data
  • Microsoft Edge: Settings > Cookies and Site Permissions
12

Protection of Minors

ada168 does not knowingly collect, process, or retain Personal Data from individuals under the age of 21. The Platform is intended exclusively for adults aged 21 years and older, in accordance with Indonesian consumer-protection standards and international responsible-gaming best practices.

During the KYC verification process, we require documentary proof of age from all Users. If we discover that an account has been registered by a person under 21, we will immediately suspend the account, void all transactions, and delete associated Personal Data in accordance with applicable law.

Parents and guardians who believe that a minor may have provided Personal Data to ada168 should contact us immediately at the email address provided in Clause 15. We take reports of underage access seriously and will investigate and act upon such reports without delay.

13

Third-Party Links and Services

The Platform may contain links to external websites, applications, or services operated by third parties, such as payment processors, game studios, or social-media platforms. ada168 is not responsible for the privacy practices or content of these third-party sites.

We strongly encourage you to review the privacy policies of any external site you visit before providing Personal Data. This Privacy Policy applies solely to data collected by ada168 through the Platform and does not extend to third-party services, even where they are accessed via a link on our site.

14

Changes to This Privacy Policy

ada168 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform functionality. When material changes are made that affect how we collect or use your Personal Data, we will notify you in advance through one or more of the following methods:

  • Email notification to the address registered on your account.
  • A prominent notice displayed on the Platform homepage for at least 14 days prior to the changes taking effect.
  • An in-account notification when you next log in.

Your continued use of the Platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using the Platform and may request account closure and data deletion as described in Clause 10.

The current version of this Policy is always available at https://ada168.cam/privacy-policy and is identified by the "Effective Date" displayed at the top of this page.

15

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy, wish to exercise your data-protection rights, or need to report a suspected Data Breach or privacy violation, please contact our Data Protection Officer through the following channel:

Data Protection and Privacy Enquiries:
[email protected]

Subject Line: Privacy Enquiry / Data Subject Request / GDPR Request
Response Time: Within 30 calendar days for data-subject-access requests; within 72 hours for Data Breach reports
Languages: English and Indonesian (Bahasa Indonesia)

When contacting us regarding a data-subject request, please include your registered account username, a clear description of your request, and any relevant reference numbers. To protect your privacy, we may ask you to verify your identity before fulfilling certain requests.

Questions About Your Privacy?

Our team is committed to transparency and accountability. If you have any questions about how we handle your data, need to exercise your rights, or want to learn more about our security practices, we are here to help.