Privacy Policy

amel24 is committed to protecting the privacy and personal data of all users who access and use our online betting and gaming platform. This Policy applies to all personal data processed by amel24 in connection with the amel24 website, mobile applications, and related services, wherever those services are accessed from — including by Members based in Jakarta, Surabaya, Bandung, Medan, Bali, and other regions across Indonesia.

We recognize that trust is the foundation of any long-term relationship between an online gaming platform and its players. This Policy is written to be transparent and plain-language wherever possible, without sacrificing the legal precision necessary to constitute an enforceable privacy notice. Where technical or legal terms are used, we have endeavored to provide sufficient context for a general reader to understand their meaning.

This Policy does not apply to the data practices of third-party game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Pocket Games Soft, or Spribe) whose software is licensed and hosted on the amel24 platform. Those providers operate under their own privacy frameworks. Where amel24 acts as a data processor on their behalf, a separate data processing agreement governs the arrangement.

For the purposes of applicable data protection legislation, the data controller responsible for your personal data is the amel24 operating entity holding the international gaming license under which the Platform operates. Contact details for the data controller and our designated Data Protection Officer (DPO) are provided in Clause 15 of this Policy.

amel24 collects personal data across three primary channels: data you provide directly, data generated automatically through your use of the Platform, and data received from third parties (such as payment processors and identity verification services).

3.1 Data You Provide Directly

3.2 Data Collected Automatically

3.3 Data Received from Third Parties

• Identity verification results from our KYC service provider (e.g., document authenticity score, facial match result).
• Payment verification data from BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja — limited to transaction confirmation status and account name matching.
• Fraud and AML screening results from our compliance screening service providers.
• Publicly available data relevant to responsible gaming obligations, such as self-exclusion registry data where a national registry exists.

amel24 uses the personal data described in Clause 3 for the following specific and documented purposes:

• Account Creation and Management: To register your account, authenticate your identity at login, maintain account records, and communicate account-related notifications to you.
• Identity Verification (KYC): To verify that you meet the eligibility criteria set out in our Terms & Conditions — in particular that you are at least 21 years of age and a resident of Indonesia — and to comply with our anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
• Transaction Processing: To process deposits via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja; to process withdrawal requests to your verified payment method; and to maintain an accurate transaction ledger for your account denominated in IDR.
• Service Delivery: To operate sports betting markets, live casino games, slot gacor (high-payout slots), togel (Indonesia's traditional numbers lottery), and all other products available on the amel24 platform.
• Customer Support: To respond to your inquiries, resolve disputes, and maintain a record of your support interactions for quality assurance purposes. Our support team includes native Bahasa Indonesia speakers serving Members across Jakarta, Surabaya, Bandung, Bali, and beyond.
• Responsible Gaming: To monitor betting patterns that may indicate problem gambling behavior, to enforce deposit limits, loss limits, and self-exclusion orders you have set, and to fulfill our duty-of-care obligations under our licensing conditions.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Legal and Regulatory Compliance: To meet our obligations under applicable gaming regulations, financial crime legislation, and data protection law, including responding to lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: To analyze aggregated, anonymized usage data to improve the performance, stability, and feature set of the amel24 platform. Individual user profiles are not used for this purpose without your consent.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via email, SMS, or in-app notification — but only where you have opted in to receive such communications. You may withdraw marketing consent at any time through your account settings.

amel24 processes your personal data only where a lawful basis exists. The primary legal bases we rely on are as follows:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you accepted at registration — including account management, transaction processing, and game service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations — including KYC identity verification, AML/CTF screening, transaction record-keeping, and responding to lawful authority requests.
• Legitimate Interests: Processing carried out for purposes that amel24 has assessed as constituting a legitimate interest that is not overridden by your fundamental rights and freedoms — including fraud detection, platform security, responsible gaming monitoring, and aggregated analytics for service improvement.
• Consent: Processing carried out only where you have provided explicit, freely given, specific, and informed consent — primarily in the context of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

amel24 does not sell your personal data. We share personal data with third parties only in the following specific circumstances, and only to the minimum extent necessary for the stated purpose:

• Payment Processors: BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and regulatory frameworks.
• KYC and Identity Verification Providers: Specialist third-party identity verification services receive your KYC documents and biometric data (where applicable) solely for the purpose of verifying your identity and age. These providers are contractually bound to process data only for the purposes specified by amel24.
• AML and Fraud Screening Providers: Compliance screening services receive limited personal data (typically name, date of birth, and transaction metadata) to screen against financial crime databases as required by our licensing conditions.
• Game Content Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session-level data necessary to deliver their games within the amel24 platform. No directly identifiable financial data is shared with game providers beyond what is necessary to authenticate a game session.
• Cloud Infrastructure and Hosting Providers: Our hosting and cloud infrastructure providers process data on our behalf under strict data processing agreements. Server infrastructure is located in jurisdictions with adequate data protection standards.
• Regulatory and Law Enforcement Authorities: amel24 will disclose personal data to competent regulatory bodies, courts, or law enforcement agencies where required to do so by applicable law or a valid legal process, and will inform you of such disclosure to the extent permitted by law.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of amel24's assets, personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. Affected Members will be notified before any such transfer takes effect.

amel24 is an internationally operated platform, and your personal data may be transferred to and processed in countries outside Indonesia where our servers, service providers, or group companies are located. Where such transfers occur, amel24 ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to that required under applicable data protection law.

Safeguards used for international transfers include:

• Standard Contractual Clauses (SCCs) approved by the relevant data protection authority, incorporated into our agreements with all international data processors.
• Data processing agreements that impose binding data security, confidentiality, and access-control obligations on all recipients of personal data.
• Transfer impact assessments conducted on a case-by-case basis for transfers to jurisdictions assessed as presenting elevated data protection risk.

amel24 uses cookies and similar tracking technologies on our website and mobile application to deliver essential platform functionality and to improve your experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, load-balancing cookies, and security tokens. These cookies cannot be disabled without preventing core functionality from working. No consent is required for strictly necessary cookies.
• Functional Cookies: Remember your preferences such as language settings, display options, and recently viewed game categories. These cookies persist between sessions to provide a more personalized experience.
• Analytics Cookies: Collect anonymized, aggregated data about how Members use the Platform — including pages visited, session duration, and navigation paths — to help us improve the design and performance of amel24. These cookies are activated only with your consent.
• Marketing and Retargeting Cookies: Used only where you have explicitly opted in. amel24 does not use third-party advertising network cookies for cross-site behavioral profiling.

You can manage your cookie preferences through your browser settings. Please note that disabling cookies beyond the strictly necessary category may affect the functionality of certain features on the amel24 platform. On mobile applications, equivalent device-level tracking settings apply.

amel24 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your account's existence on the Platform, plus a post-closure period as set out below.
• KYC and identity documents: Retained for a minimum of 5 years following account closure, in compliance with AML/CTF record-keeping requirements.
• Transaction records (deposits, withdrawals, bets in IDR): Retained for a minimum of 5 years from the date of the transaction, in line with financial record-keeping obligations.
• Customer support records: Retained for 3 years from the date of the last interaction, unless a longer period is required for an unresolved dispute.
• Marketing consent records: Retained for the duration of your marketing opt-in, plus 3 years after withdrawal of consent, to evidence compliance.
• Server log data (IP addresses, session logs): Retained for 12 months from the date of collection for security and fraud-detection purposes, then deleted or anonymized.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with our data disposal procedures. Anonymized data may be retained indefinitely for aggregated statistical purposes.

Depending on your location and the applicable data protection framework, you may hold some or all of the following rights in relation to your personal data held by amel24. We honor these rights for all Members, regardless of jurisdiction, to the extent operationally and legally feasible:

To exercise any of these rights, please submit a written request to our Data Protection Officer at the contact details provided in Clause 15. We will acknowledge your request within 3 business days (WIB) and provide a substantive response within 30 calendar days. Where requests are complex or numerous, this period may be extended by a further 60 days with prior notice.

amel24 implements a comprehensive, layered information security program to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Key technical and organizational measures include:

• Transport Layer Security (TLS 1.3): All data transmitted between your browser or app and amel24 servers is encrypted in transit.
• AES-256 Encryption at Rest: Sensitive data — including KYC documents, payment details, and account credentials — is encrypted at the storage layer.
• Multi-Factor Authentication (MFA): Available and encouraged for all Member accounts. Internal administrative access to production systems requires mandatory MFA.
• Role-Based Access Controls (RBAC): Employee access to personal data is granted on a strict need-to-know basis. Access is logged and audited regularly.
• Penetration Testing: amel24 conducts regular third-party penetration tests on its platform infrastructure to identify and remediate security vulnerabilities before they can be exploited.
• DDoS Mitigation and Web Application Firewall (WAF): Enterprise-grade traffic filtering protects the Platform from denial-of-service attacks and common web application exploits.
• Security Incident Response Plan: A documented and tested incident response procedure is in place to contain, investigate, and remediate security incidents in a timely manner.

Despite these measures, no online system can guarantee absolute security. We encourage you to use a strong, unique password for your amel24 account, enable MFA, and report any suspicious account activity to our support team immediately.

The amel24 platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account or use any services on the amel24 platform.

If amel24 discovers or reasonably suspects that personal data has been collected from a person under 21 years of age, we will take immediate steps to:

• Permanently close the associated account.
• Securely delete all personal data associated with the account, except where retention is required by law.
• Refund any real-money deposits made to the account to the original payment source, where operationally and legally feasible.

Parents and guardians who believe their child may have registered on the amel24 platform are encouraged to contact our Data Protection Officer immediately at the details provided in Clause 15.

The amel24 platform may contain references to third-party game providers, payment services, or informational resources. This Privacy Policy applies solely to personal data processed by amel24 and does not extend to any third-party websites, applications, or services that may be accessible from or referenced within the amel24 platform.

amel24 is not responsible for the privacy practices of third-party game providers such as Pragmatic Play, Evolution Gaming, or Spribe, nor for the data practices of payment providers including OVO, DANA, GoPay, ShopeePay, or LinkAja. We encourage you to review the privacy policies of any third-party service you interact with independently of the amel24 platform.

amel24 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify you by:

• Displaying a prominent notice on the amel24 homepage and account dashboard for a minimum of 14 days prior to the amended Policy taking effect.
• Sending a notification to the email address registered to your account, where the change materially affects your rights or the way we process your data.
• Updating the "Last Updated" date at the top of this Policy.

Your continued use of the amel24 platform after the effective date of any amendment constitutes your acknowledgment of the updated Policy. If you do not agree with the changes, you should cease using the Platform and contact our support team to close your account.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to raise a data protection concern, please contact our Data Protection Officer (DPO) using the following details:

• Email: [email protected] (plain text — not a clickable link; please include "Privacy / DPO Request" in your subject line)
• Live Chat: Available 24/7 via the in-app chat on the amel24 platform — select "Privacy & Data" from the support topic menu
• Response Time: DPO inquiries are acknowledged within 3 business days (WIB) and resolved within 30 calendar days of receipt of all necessary information

Our support and compliance team serves Members across all regions of Indonesia including Jakarta, Surabaya, Bandung, Medan, Yogyakarta, Bali, Semarang, Palembang, and Makassar. Native Bahasa Indonesia-speaking agents are available during peak WIB hours to assist with privacy inquiries in your preferred language, even though this Policy and the amel24 platform itself are presented in English.