Your privacy matters to us. This Policy explains exactly what personal data aha303 collects, why we collect it, how we use and protect it, and what rights you hold over your information.
Last updated: January 2026aha303 ("we", "us", "our") operates the online betting and casino platform accessible at https://aha303.bet (the "Platform"). We are committed to protecting the privacy of every individual who accesses, registers on, or interacts with the Platform. This Privacy Policy ("Policy") describes our practices with respect to the collection, use, storage, disclosure, and protection of personal data.
This Policy applies to all users of the Platform, including visitors who browse without registering and registered members who hold an aha303 account. It covers data collected through the website, our customer support channels, and any other touchpoint through which you interact with aha303.
aha303 primarily serves players located in Indonesia. Where applicable, references to local context — such as Indonesian Rupiah (IDR), payment processors like BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja, or time references in Western Indonesia Time (WIB, UTC+7) — are included to ensure this Policy is directly relevant to our member base.
The following terms carry the meanings set out below throughout this Policy.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living natural person, directly or in combination with other data. |
| "Processing" | Any operation performed on Personal Data — including collection, storage, use, disclosure, transfer, or deletion. |
| "Controller" | The entity that determines the purposes and means of Processing. For the purposes of this Policy, aha303 is the Controller of your Personal Data. |
| "Processor" | A third-party service provider that processes Personal Data on behalf of aha303 under a data processing agreement. |
| "Account" | A registered member profile on the aha303 Platform, identified by a unique username and email address. |
| "KYC" | Know Your Customer — the identity and age verification process aha303 conducts to confirm a member's identity before processing withdrawals or upon reasonable request. |
| "Cookies" | Small text files placed on your device by the Platform to store preferences, session data, and analytics information. |
aha303 collects only the Personal Data that is necessary to operate the Platform, comply with legal obligations, and deliver a high-quality betting and gaming experience. The categories of data we collect are described below.
When you create an aha303 account, we collect your legal full name, date of birth, residential address, email address, and a self-selected username. This information is mandatory — without it, we cannot open an account or verify your eligibility to use the Platform.
To comply with anti-money-laundering obligations and to verify that you meet our 21+ age requirement, we may request a copy of a government-issued photo identity document (KTP or passport), proof of residential address (bank statement or utility bill issued within the preceding 90 days), and a selfie photograph alongside your identity document. KYC data is processed and stored with heightened security controls and is used exclusively for verification purposes.
When you make a deposit or request a withdrawal, we collect the name and type of the payment method used (for example, BCA bank transfer, OVO e-wallet, or GoPay), transaction reference numbers, and transaction amounts in Indonesian Rupiah (IDR). We do not store full bank account numbers or full e-wallet credentials on our servers — payment processing is handled by certified third-party payment gateways who are contractually bound to maintain PCI-DSS standards.
We record details of all wagers placed on the Platform, including the product type (sportsbook, live casino, slots, togel draws), stake amounts, odds or game RTP at the time of play, settlement outcomes, and timestamps in WIB. This data is essential for account management, dispute resolution, bonus calculation, and regulatory reporting.
When you access the Platform, our servers automatically collect your IP address, browser type and version, device type and operating system, screen resolution, referring URL, pages visited, session duration, and click-path data. This information is collected to maintain Platform security, detect fraud, and improve the user experience.
If you contact aha303 customer support via live chat or email, we retain a record of that correspondence, including your messages, the support agent's responses, and metadata such as the date and time of the interaction. These records are kept to ensure continuity of service and for quality-assurance purposes.
From time to time you may voluntarily provide additional information — for example, by completing a customer satisfaction survey, entering a promotion, or updating your account profile. This data is collected only with your active participation and is used for the purpose for which it was submitted.
aha303 collects Personal Data through the following channels:
aha303 processes your Personal Data only for the specific, explicit, and legitimate purposes described in the table below. We do not process Personal Data in a manner incompatible with these stated purposes.
| Purpose | Description |
|---|---|
| Account Management | Opening, maintaining, and closing your aha303 account; processing deposits and withdrawals; applying bonuses; and managing your Responsible Gaming preferences. |
| Identity & Age Verification | Confirming that you are at least 21 years of age and are who you claim to be, in compliance with our KYC obligations. |
| Fraud Prevention & Security | Detecting, investigating, and preventing fraudulent activity, money laundering, unauthorised account access, and other illegal conduct. |
| Legal Compliance | Meeting obligations under applicable anti-money-laundering laws, licensing conditions, and any lawful requests from competent authorities. |
| Customer Support | Responding to enquiries, resolving disputes, processing complaints, and maintaining support records for quality assurance. |
| Platform Improvement | Analysing aggregated, anonymised usage data to improve site performance, game selection, and the overall user experience. |
| Responsible Gaming | Monitoring wagering behaviour to identify indicators of problem gambling and to enable the application of self-exclusion or limit controls where appropriate. |
| Marketing Communications | Sending promotional offers and platform updates to members who have explicitly consented to receive such communications. You may withdraw consent at any time. |
aha303 processes Personal Data on the following legal grounds:
aha303 does not sell, rent, or otherwise transfer your Personal Data to unaffiliated third parties for their own marketing purposes. We share data only in the limited circumstances described below, and only to the extent necessary for each purpose.
We engage trusted third-party service providers who process data on our behalf under binding data processing agreements. These include payment processors (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja), KYC and identity verification providers, fraud-detection platforms, cloud hosting providers, customer support software vendors, and email delivery services. Each Processor is permitted to use your data only for the specific purpose for which they have been engaged.
Third-party game studios — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft — may receive anonymised session data (such as game identifiers, round IDs, and stake amounts) to facilitate game operation, dispute resolution, and RNG auditing. These providers do not receive your name, contact details, or financial account information.
aha303 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by a valid legal order, warrant, or statutory obligation. We will notify you of such a request unless legally prohibited from doing so.
In the event of a merger, acquisition, or sale of all or a substantial part of aha303's business assets, Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change in advance, and the new entity will be required to honour this Policy or provide you with a materially equivalent level of protection.
aha303 retains Personal Data only for as long as is necessary to fulfil the purposes set out in this Policy or to comply with applicable legal retention obligations. The general retention schedules we apply are as follows:
| Data Category | Retention Period |
|---|---|
| Account Registration Data | For the lifetime of the account, plus 5 years after account closure. |
| KYC / Identity Documents | 5 years from the date of verification, or longer if required by applicable anti-money-laundering regulations. |
| Financial Transaction Records | 7 years from the date of the transaction, in line with standard financial record-keeping requirements. |
| Wagering and Gaming Records | 5 years from the date of the wager. |
| Customer Support Records | 3 years from the date of the last interaction. |
| Technical / Log Data | 90 days, unless retained longer due to an active security investigation. |
| Marketing Consent Records | Until consent is withdrawn, plus 1 year for audit purposes. |
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identified or identifiable individual.
aha303 implements a comprehensive set of technical and organisational security controls to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes:
While we employ industry-leading security practices, no system is entirely immune to risk. You play an important role in keeping your account secure: use a strong, unique password; never share your credentials; and contact support immediately if you suspect unauthorised access to your aha303 account.
aha303 uses Cookies and similar tracking technologies to operate essential Platform functionality, remember your preferences, and gather aggregated analytics data that helps us improve the Platform. The categories of Cookies we use are described below.
| Category | Purpose | Can be disabled? |
|---|---|---|
| Strictly Necessary | Essential for the Platform to function — including session authentication, security tokens, and load balancing. These Cookies do not collect Personal Data for marketing purposes. | No — required for operation |
| Functional | Remember your language preference, device type, and last-visited game category to personalise your experience on return visits. | Yes — via Cookie settings |
| Analytics | Collect anonymised data on how users navigate the Platform (pages visited, time on page, click paths) to inform product improvements. No individual profiling is performed. | Yes — via Cookie settings |
| Security & Fraud Prevention | Device fingerprinting and behavioural signals used by our fraud-detection systems to identify suspicious activity and protect your account. | No — required for security |
You may manage non-essential Cookie preferences through the Cookie settings panel accessible from the footer of the Platform. Please note that disabling certain Cookies may affect the functionality of some features. aha303 does not use third-party advertising Cookies or share Cookie data with advertising networks.
As an individual whose Personal Data is processed by aha303, you hold the following rights. To exercise any of these rights, please contact our support team as described in Section 15. We will respond to all verified requests within 30 days.
Data Subject Rights
aha303 respects your right to control your own personal data. Below are the rights available to every registered member of our platform.
You may request a copy of all Personal Data we hold about you, along with information on how it is used and with whom it has been shared.
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
In certain circumstances you may request the deletion of your Personal Data. Note that data subject to mandatory legal retention periods cannot be erased prior to their expiry.
You may ask us to pause processing of your data in specific circumstances — for example, while you contest the accuracy of the data or the legitimacy of our processing.
Where processing is based on your consent or contractual necessity, you may request your data in a structured, machine-readable format for transfer to another provider.
You may object to processing based on legitimate interests or for direct marketing purposes. We will cease that processing unless we can demonstrate compelling grounds that override your interests.
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
If you believe aha303 has handled your Personal Data unlawfully, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.
You have the right not to be subject to a decision based solely on automated processing — including profiling — that produces significant legal or similarly serious effects on you.
The aha303 Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect Personal Data from individuals under the age of 21. If you are under 21, you must not register an account, make a deposit, or place a wager on the Platform.
If aha303 discovers or has reasonable grounds to believe that an account has been opened by or is being used by a person under the age of 21, we will immediately suspend the account, conduct a mandatory KYC review, and delete or anonymise the associated Personal Data to the extent permitted by our legal obligations. Any winnings generated during the period of underage use will be forfeited.
The aha303 Platform may contain references to game studios, payment providers, or sports data feeds operated by third parties. Where such references involve a link to an external website or service, please be aware that aha303 has no control over the privacy practices of those third parties. This Policy applies only to the aha303 Platform.
We strongly recommend that you review the privacy policy of any third-party service you access. aha303 accepts no responsibility or liability for the data collection or processing practices of external services, even where those services are integrated into or referenced from the Platform.
aha303 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make a material change to this Policy, we will notify registered members via email or by displaying a prominent notice on the Platform at least 14 days before the change takes effect.
The updated Policy will always be accessible at aha303.bet/privacy-policy and will display the "Last updated" date at the top of the page. Your continued use of the Platform after the effective date of any revision constitutes your acknowledgement of the updated Policy. If you do not accept the revised terms, you must cease using the Platform and may request account closure via our support team.
If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about how aha303 has handled your Personal Data, please reach out to our support team through any of the following channels:
When submitting a data subject rights request, please include your registered username, the specific right you wish to exercise, and any relevant details that will help us locate your data accurately. We may ask you to complete an identity verification step before processing your request, to protect against unauthorised access to another person's data.
All privacy-related requests are handled by our dedicated data protection team and will be acknowledged within 5 business days, with a substantive response provided within 30 days of the acknowledgement. If your request is particularly complex, we will notify you if additional time — up to a further 60 days — is required.
Why Trust aha303
Every measure we take is designed to give you confidence that your personal data is in safe hands.
Every connection between your device and aha303's servers is protected by bank-grade 256-bit SSL/TLS encryption, ensuring your credentials and financial data are never exposed in transit.
aha303 will never sell, rent, or trade your personal data to advertisers, data brokers, or any unaffiliated third party. Your information is used solely to operate your account and improve the platform.
Request a complete copy of the data we hold on you at any time. We will respond within 30 days with a structured, readable report covering every category of personal data we process.
Identity documents submitted for KYC verification are stored with heightened encryption controls, accessible only to authorised compliance staff, and are securely deleted after the mandatory retention period.
If you have consented to receive promotional communications, you can withdraw that consent instantly at any time via your account settings or by contacting support. No questions asked, no delays.
We publish exact retention periods for every category of data we hold. When the retention period expires, data is securely deleted or irreversibly anonymised — no indefinite storage of your records.
You're in Good Hands
Now that you understand how we protect your personal data, explore everything aha303 has to offer — from live sportsbook action to thousands of slots and live casino tables, all in Indonesian Rupiah.
Login to aha303 View Sportsbook Browse Slots Read Our FAQ