Privacy Policy

1. Introduction

idr99 is committed to protecting the privacy and security of our users. This Privacy Policy describes in detail how we collect, use, store, and safeguard your personal information when you use our online betting platform at idr99.cam. We recognize that privacy is a fundamental right, and we have designed our data practices to be transparent, fair, and compliant with applicable data protection regulations.

This Privacy Policy applies to all users of idr99 services, including sports betting, live casino, online slots, togel (Indonesian numbers lottery), sabung ayam (cockfighting), and all other gambling products offered on our platform. By creating an account, depositing funds, or placing bets on idr99, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

If you do not agree with any part of this Privacy Policy, you should not use our services. Please also review our Terms & Conditions, which govern your use of the idr99 platform and work in conjunction with this Privacy Policy.

2. Data Controller Information

For the purposes of applicable data protection laws, the data controller responsible for your personal information is:

idr99 operates as an offshore online betting platform licensed in Curacao. While we serve users primarily in Indonesia, our data processing activities are governed by the laws of Curacao and international data protection best practices. If you have questions or concerns about how we handle your personal data, please contact us using the details provided in Section 14 of this policy.

3. What Personal Data We Collect

To provide our betting services, comply with legal obligations, and ensure platform security, idr99 collects several categories of personal data from users:

3.1 Account Registration Information

• Full Legal Name: As it appears on your government-issued identification
• Date of Birth: To verify you are 21 years or older
• Email Address: For account communications, password recovery, and promotional offers (if opted in)
• Mobile Phone Number: For security verification, withdrawal confirmations, and customer support
• Residential Address: To verify your location and comply with anti-money laundering regulations
• Username and Password: Your chosen login credentials (passwords are encrypted and never stored in plain text)

3.2 Identity Verification (KYC) Documents

• Government-Issued ID: Indonesian national ID (KTP) or passport for age and identity verification
• Selfie with ID: A photograph of you holding your ID next to your face to prevent identity fraud
• Proof of Address: Utility bill, bank statement, or government letter issued within the last 3 months

3.3 Financial Information

• Bank Account Details: Indonesian bank account number and bank name (BCA, BRI, BNI, Mandiri) for deposits and withdrawals
• E-Wallet Information: OVO, DANA, or GoPay account details (where applicable)
• Transaction History: Records of all deposits, withdrawals, bets placed, and account balance changes

3.4 Technical & Usage Data

• IP Address: Your internet protocol address to detect location and prevent fraud
• Device Information: Device type, operating system, browser type, and screen resolution
• Login History: Date, time, and location of each login to your account
• Betting Activity: Complete records of all bets placed, games played, and outcomes
• Cookies & Tracking Data: Information collected via cookies and similar technologies (see Section 10)

3.5 Communications Data

• Live Chat Transcripts: Records of conversations with customer support agents
• Email Correspondence: All emails sent to and from idr99 support
• WhatsApp Messages: Support conversations conducted via WhatsApp

4. How We Collect Your Data

idr99 collects your personal data through the following methods:

4.1 Direct Provision by You

Most of your personal data is provided directly by you when you:

• Complete the account registration form
• Upload KYC verification documents
• Make deposits or request withdrawals
• Contact customer support via live chat, email, or WhatsApp
• Update your account settings or profile information

4.2 Automatic Collection via Technology

Certain data is collected automatically when you access idr99 through:

• Cookies: Small text files stored on your device that track session data, preferences, and behavior
• Server Logs: Automated recording of IP addresses, page visits, and timestamp data
• Analytics Tools: Third-party services that help us understand user behavior and improve platform performance

4.3 Third-Party Sources

In limited cases, we may receive data from third parties:

• Payment Processors: Transaction confirmation and fraud prevention data from banks and e-wallet providers
• Identity Verification Services: KYC data validation from authorized verification partners
• Game Providers: Betting and gaming activity data from third-party game studios

5. How We Use Your Data

idr99 processes your personal data for the following purposes:

5.1 Account Management & Service Delivery

• Creating and maintaining your user account
• Processing deposits and withdrawals
• Enabling you to place bets and play games
• Calculating and crediting winnings to your account
• Applying bonuses and promotions according to their terms

5.2 Legal & Regulatory Compliance

• Verifying you are 21 years or older (age restriction enforcement)
• Conducting KYC checks to prevent identity fraud and money laundering
• Complying with Curacao eGaming licensing requirements
• Responding to lawful requests from authorities or regulators
• Maintaining records required by anti-money laundering laws

5.3 Security & Fraud Prevention

• Detecting and preventing unauthorized account access
• Identifying fraudulent betting patterns or bonus abuse
• Monitoring for suspicious transactions or money laundering attempts
• Protecting against cyberattacks and data breaches
• Enforcing our Terms & Conditions and preventing rule violations

5.4 Customer Support

• Responding to your inquiries via live chat, email, or WhatsApp
• Resolving technical issues and account problems
• Investigating disputes related to bets, withdrawals, or bonuses
• Providing personalized assistance based on your account history

5.5 Marketing & Communications (With Your Consent)

• Sending promotional offers, bonus notifications, and special event announcements via email
• Personalizing marketing messages based on your betting preferences
• Notifying you about new games, features, or platform updates

Important: You can opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting customer support. Opting out does not affect essential service emails (e.g., withdrawal confirmations, security alerts).

5.6 Platform Improvement & Analytics

• Analyzing user behavior to improve platform design and functionality
• Identifying popular games and betting markets to optimize our offerings
• Testing new features and measuring their effectiveness
• Generating aggregated statistics and reports (anonymized data only)

6. Data Sharing & Third Parties

idr99 does not sell or rent your personal data to third parties. However, we may share your data with trusted partners in the following circumstances:

6.1 Payment Processors

To process deposits and withdrawals, we share necessary financial information (bank account number, e-wallet details) with:

• Indonesian banks (BCA, BRI, BNI, Mandiri)
• E-wallet providers (OVO, DANA, GoPay)
• Third-party payment gateway services

These partners are contractually obligated to protect your data and use it only for transaction processing purposes.

6.2 Game Providers

When you play casino games, slots, or live dealer games, your betting activity data is shared with the respective game studios (e.g., Evolution Gaming, Pragmatic Play, NetEnt). This is necessary to deliver the gaming experience and ensure fair play.

6.3 Identity Verification Services

We use third-party KYC verification services to validate your identity documents and prevent fraud. These services receive copies of your ID and proof of address solely for verification purposes and are bound by strict confidentiality agreements.

6.4 Cloud Service Providers

idr99 uses secure cloud infrastructure providers to host our platform and store data. These providers have access to data only as necessary to deliver their services and are contractually required to maintain security and confidentiality.

6.5 Legal & Regulatory Authorities

We may disclose your personal data to law enforcement, regulators, or courts if required by law or if we believe in good faith that such disclosure is necessary to:

• Comply with legal obligations or court orders
• Protect the rights, property, or safety of idr99, our users, or the public
• Investigate suspected illegal activity such as fraud or money laundering

6.6 Business Transfers

In the event of a merger, acquisition, or sale of idr99 assets, your personal data may be transferred to the acquiring entity. You will be notified via email if such a transfer occurs, and the new entity will be bound by this Privacy Policy.

7. Data Security Measures

idr99 employs industry-leading security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction:

7.1 Encryption

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Sockets Layer) technology, the same encryption standard used by banks and financial institutions.
• Database Encryption: Stored personal data is encrypted at rest using AES-256 encryption.
• Password Hashing: User passwords are hashed using bcrypt with salt, ensuring even idr99 staff cannot view your password in plain text.

7.2 Access Controls

• Access to personal data is restricted to authorized idr99 employees who require it to perform their job duties.
• All staff with data access undergo background checks and sign confidentiality agreements.
• Multi-factor authentication (MFA) is required for administrative access to sensitive systems.

7.3 Regular Security Audits

• Third-party security firms conduct regular penetration testing and vulnerability assessments.
• Our platform undergoes annual compliance audits to ensure adherence to international security standards.
• We maintain an incident response plan to quickly address any security breaches.

7.4 User Responsibilities

While idr99 takes extensive measures to protect your data, you also play a role in security:

• Use a strong, unique password for your account
• Never share your password with anyone, including idr99 staff
• Enable two-factor authentication (2FA) if available
• Log out of your account when using shared or public devices
• Notify us immediately if you suspect unauthorized access to your account

8. Data Retention Period

idr99 retains your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy and to comply with legal obligations:

8.1 Active Accounts

While your account remains active, we retain all personal data, transaction history, and betting records to provide continuous service and comply with licensing requirements.

8.2 Closed Accounts

After you close your account, idr99 retains certain data for regulatory and legal purposes:

• Financial Records: Retained for 7 years to comply with anti-money laundering laws and tax regulations
• KYC Documents: Retained for 5 years as required by Curacao eGaming licensing
• Betting History: Retained for 5 years for dispute resolution and regulatory audits
• Marketing Data: Deleted immediately if you opt out; otherwise retained for 2 years after account closure

8.3 Data Deletion

Once the retention period expires, your personal data is securely deleted or anonymized such that it can no longer be linked to you as an individual. Anonymized aggregated data may be retained indefinitely for statistical analysis.

9. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal data:

9.1 Right of Access

You have the right to request a copy of all personal data idr99 holds about you. We will provide this information in a commonly used electronic format within 30 days of your request.

9.2 Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request correction. You can update most information directly in your account settings, or contact customer support for assistance.

9.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data, subject to legal and regulatory retention requirements. Note that we cannot delete data we are legally obligated to retain (e.g., financial records for 7 years under anti-money laundering laws).

9.4 Right to Restrict Processing

You can request that we limit how we use your personal data in certain circumstances, such as while we verify the accuracy of data you have disputed.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to transmit it to another service provider if technically feasible.

9.6 Right to Object

You can object to processing of your personal data for marketing purposes at any time by opting out of promotional emails or contacting customer support.

9.7 How to Exercise Your Rights

To exercise any of these rights, please contact idr99 customer support at [email protected] with "Privacy Rights Request" in the subject line. We will respond within 30 days. You may be required to verify your identity before we process your request.

10. Cookies & Tracking Technologies

idr99 uses cookies and similar tracking technologies to enhance your user experience, analyze platform performance, and deliver personalized content.

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help the website remember your preferences, track your activity, and provide a more personalized experience.

10.2 Types of Cookies We Use

• Essential Cookies: Required for the platform to function properly (e.g., maintaining your login session, processing transactions). These cannot be disabled.
• Performance Cookies: Collect anonymous data about how users interact with the platform to help us improve performance and identify issues.
• Functional Cookies: Remember your preferences (e.g., language settings, display options) to provide a more personalized experience.
• Advertising Cookies: Track your activity across websites to deliver targeted marketing content. These cookies are used only if you consent.

10.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can choose to:

• Block all cookies
• Accept cookies from specific websites only
• Delete cookies after each browsing session

Note that blocking essential cookies may prevent you from using certain features of the idr99 platform.

11. International Data Transfers

idr99 operates globally and may transfer your personal data to servers and service providers located outside Indonesia, including in Curacao, the European Union, and other jurisdictions with robust data protection laws.

When transferring data internationally, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by regulatory authorities
• Data processing agreements with third-party service providers
• Compliance with international data protection frameworks

By using idr99, you consent to the transfer of your personal data outside Indonesia as described in this Privacy Policy.

12. Children's Privacy

idr99 strictly prohibits use of our services by individuals under 21 years of age. We do not knowingly collect personal data from minors. Our KYC verification process is designed to prevent underage account creation.

If we discover that a user is under 21, we will immediately:

• Close the account permanently
• Delete all personal data associated with the account
• Confiscate any deposits and winnings without refund

If you believe a minor has created an account on idr99, please report it immediately to [email protected].

13. Changes to This Privacy Policy

idr99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. Material changes will be communicated via:

• Email notification to all registered users
• Prominent notice on the idr99 website
• Update to the "Last Updated" date at the top of this document

We encourage you to review this Privacy Policy periodically. Continued use of idr99 services after changes are posted constitutes your acceptance of the revised policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how idr99 handles your personal data, please contact us:

• Email: [email protected] (reply within 24 hours)
• Live Chat: Available 24/7 via the website (average response under 2 minutes)
• WhatsApp: Available 24/7 (contact number displayed after login)

For formal privacy rights requests or data protection inquiries, please use the email address above with "Privacy Request" in the subject line. We will respond within 30 days.