aroma Platform Privacy Notice

This page describes what data we collect when you use aroma and how we keep that data protected. We at aroma are committed to transparent data handling and compliance with applicable privacy regulations. When you create an account, deposit funds via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or direct bank transfer, or engage with our sportsbook, live-casino tables, and games, we collect information necessary to verify your identity, process payments, and provide our service.

We do not sell your personal information to third parties. We use your data only to operate aroma, comply with legal obligations, and improve our platform. Our privacy practices are designed around protecting your account security and payment information while ensuring we meet regulatory requirements in the jurisdictions where we operate.

If you have questions about how we handle your data, contact our support team or review the specific sections below.

What data we collect on aroma

We collect information in several categories. During account registration, we collect your full name, date of birth, email address, phone number, and residential address. We use this information to verify your identity and comply with Know Your Customer (KYC) regulations.

When you deposit funds on aroma, we collect information about your chosen payment method — your bank account details or digital wallet identifier for DANA, e-wallet, mobile banking, local payment, online payment, or e-wallet, as well as your bank name if you use mobile banking, local payment, online payment, or e-wallet. We do not store full credit card numbers; payment processors handle card data through their own secure systems.

As you use aroma, we collect activity data — which games you access, your account balance history, deposits and withdrawals, football betting entries on Liga 1 and Piala AFF matches, live-casino table play, and esports transactions. We also collect device information including your IP address, browser type, operating system, and device identifiers. This helps us detect fraud, troubleshoot technical issues, and prevent unauthorized access.

Identity information: Name, date of birth, email, phone, address — collected at registration and verified during KYC.
Payment information: Bank account or wallet identifiers used for deposits and withdrawals; card processors handle sensitive card data.
Activity data: Game entries, betting history, balance changes, and transaction records.
Device information: IP address, browser type, operating system, device identifiers used for security and fraud prevention.

How we use your data on aroma

We use your data primarily to operate aroma and provide your account access. Your identity information is used for KYC verification, preventing account fraud, and complying with anti-money-laundering regulations. Your payment information is used to process deposits and withdrawals securely.

Your activity data helps us settle your bets, manage your balance, and generate your account history. We use device and activity information to detect suspicious patterns, prevent unauthorized access, and investigate disputes. We also use your email and phone number to send you account notifications, withdrawal confirmations, and support responses.

We do not use your data to send unsolicited marketing emails or promotional messages unless you have explicitly opted in. We do not share your information with third parties except where necessary to process payments or comply with legal requirements.

No third-party sharing: We do not sell your personal data. We share information only with payment processors, regulatory authorities (where required by law), and our own service providers bound by confidentiality agreements.

Payment processors and data storage

When you deposit via mobile banking, local payment, online payment, e-wallet, mobile banking, or local payment, you are redirected to that provider's secure payment gateway. Those providers collect and process your wallet authentication data — your PIN or biometric verification — according to their own privacy policies. We do not receive or store your wallet credentials.

For bank transfers to online payment, e-wallet, mobile banking, or local payment, your bank processes the transaction and we receive only confirmation of the transfer. We do not access your banking login credentials.

Our aroma servers may be located outside your jurisdiction. Your data is encrypted in transit using SSL/TLS protocols and protected at rest with industry-standard encryption. We restrict access to your data to authorized aroma staff and systems involved in processing your requests.

Your rights regarding your aroma data

You have the right to access your personal information held by aroma. You can request a copy of your data, including your account history, by contacting our support team. You also have the right to correct inaccurate information — if your address or contact details are outdated, we will update them upon request.

You have the right to request deletion of your account and associated data, subject to legal retention obligations. We are required to retain certain information for anti-money-laundering compliance and dispute resolution for a period after your account closes. Once applicable retention periods expire, we will delete your data or anonymize it so it cannot be linked to you.

To exercise these rights, contact our support team with your request. We will respond within a reasonable timeframe and verify your identity before providing or modifying your data.

Cookies and tracking technologies on aroma

We use cookies and similar technologies to enhance your aroma experience. These include session cookies (which remain active only during your browsing session) and persistent cookies (which stay on your device between sessions). Session cookies help us keep you logged in and secure your transactions. Persistent cookies remember your preferences and login status across visits.

We use analytics cookies to understand how users interact with aroma — which games are popular, where members encounter technical issues, and how they navigate the platform. This information helps us improve aroma's speed, usability, and reliability. These analytics cookies do not identify you personally; they collect aggregate usage patterns.

You can control cookies through your browser settings. Most browsers allow you to delete cookies and block new ones. However, disabling cookies may affect your ability to use aroma features that require session tracking, such as staying logged in or processing your payment information securely.

1

Session cookiesLogin tracking

Keep you logged in during your browsing session and protect your transactions.
2

Persistent cookiesPreferences

Remember your settings and language preference across visits.
3

Analytics cookiesUsage insights

Collect aggregate usage patterns to improve aroma performance and reliability.

Account security and password protection

We protect your aroma account using strong encryption and access controls. Your password is hashed using industry-standard algorithms and is never stored in plain text. When you log in, we verify your credentials against this hash without ever seeing your actual password.

We encourage you to use a strong, unique password for aroma and to change it regularly. Do not share your login credentials with anyone. If you suspect unauthorized access, reset your password immediately through the aroma login page and contact our support team.

We use SSL/TLS encryption for all data transmitted between your device and our servers. This protects your login credentials, payment information, and activity data from interception during transmission.

Data retention and deletion

We retain your personal information for as long as necessary to provide aroma services and comply with legal obligations. Identity and KYC information is retained for a period after account closure to meet anti-money-laundering and tax compliance requirements. Activity and transaction records are retained to settle disputes and provide account history access.

We do not retain your data longer than necessary. Once applicable retention periods expire and no disputes are pending, we delete your personal information or anonymize it so it cannot be linked to you.

This privacy notice applies to all aroma users regardless of location. Our services are available only where local law permits. If you have questions about how we handle your data or wish to exercise your privacy rights, contact our support team. We are committed to protecting your information and maintaining your trust on aroma.