Privacy Policy

1. Introduction and Scope

1.1 Who We Are

999rt operates an online gaming platform providing casino games, live dealer experiences, sports betting, and lottery services to players in Indonesia. We are committed to maintaining the highest standards of data protection and transparency in accordance with international privacy regulations and industry best practices.

1.2 Scope of This Policy

This Privacy Policy applies to all personal information collected through:

• The 999rt website accessible at https://999rt.cam
• Mobile applications and responsive mobile web interfaces
• Customer service communications via email, live chat, or phone
• Social media interactions on our official channels
• Marketing communications and promotional materials

1.3 Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to provide the gaming services you requested and fulfill our contractual obligations under our Terms & Conditions.
• Legal Compliance: We are required by law to verify your identity, age, and prevent money laundering and fraud as part of our regulatory obligations.
• Legitimate Interests: We process data to improve our services, detect fraud, ensure platform security, and conduct business analytics, provided these interests do not override your rights.
• Consent: For marketing communications and certain optional features, we obtain your explicit consent before processing your data.

2. Information We Collect

999rt collects various types of personal information to provide, maintain, and improve our services. The data we collect falls into the following categories:

2.1 Account Registration Information

When you create an account with 999rt, we collect:

• Personal Identifiers: Full legal name, date of birth, gender, nationality
• Contact Information: Email address, phone number, residential address (street, city, province, postal code)
• Account Credentials: Username, password (stored in encrypted form), security questions and answers
• Preferred Language and Currency: Indonesian Rupiah (IDR), English language preference

2.2 Identity Verification (KYC) Documents

As required by gaming regulations and anti-money laundering laws, we collect:

• Government-Issued ID: Scanned or photographed copies of your Indonesian National Identity Card (KTP) or passport
• Proof of Address: Utility bills, bank statements, or government correspondence dated within the last three months
• Selfie Verification: Photograph of you holding your ID document to confirm physical possession
• Additional Documentation: In some cases, we may request additional documents such as source of funds verification or enhanced due diligence materials

2.3 Financial and Transaction Data

• Payment Information: Bank account numbers, e-wallet account details, payment card information (processed by third-party payment processors—we do not store full card numbers)
• Transaction History: Records of all deposits, withdrawals, wagers, wins, losses, bonuses claimed, and account balances
• Payment Processor Data: Transaction IDs, timestamps, amounts, and status information from BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other payment partners

2.4 Gaming Activity and Behavioral Data

• Gameplay Records: Game types played, bet sizes, game outcomes, session duration, favorite games, playing patterns
• Sports Betting Data: Sports events wagered on, bet types (single, accumulator, live betting), odds selected, cashout activity
• Bonus and Promotion Usage: Bonuses claimed, wagering progress, bonus expiration dates, promotional email engagement
• Responsible Gaming Settings: Deposit limits, loss limits, session time limits, self-exclusion requests, reality check preferences

2.5 Technical and Device Information

We automatically collect technical data when you access our Platform:

• Device Information: Device type (desktop, tablet, mobile), operating system (Windows, iOS, Android), browser type and version, screen resolution
• Network Data: IP address, internet service provider, connection type, approximate geographic location (city and province level)
• Usage Analytics: Pages visited, time spent on pages, navigation paths, search queries, button clicks, error messages encountered
• Cookies and Tracking: Session cookies, persistent cookies, local storage data, advertising identifiers (see Section 7 for details)

2.6 Communications and Support Interactions

• Customer Service Records: Live chat transcripts, email correspondence, support ticket history, complaint records
• Marketing Preferences: Email subscription status, SMS opt-in status, promotional notification preferences
• Survey Responses: Feedback surveys, satisfaction ratings, user experience questionnaires

3. How We Use Your Information

999rt uses the personal information we collect for the following purposes:

3.1 Service Provision and Account Management

• Create and maintain your player account
• Process your deposits, withdrawals, and internal account transfers
• Enable you to place bets and play games on our Platform
• Calculate winnings, distribute payouts, and manage your account balance
• Administer bonuses, promotions, and VIP program benefits
• Provide customer support and respond to inquiries
• Send transactional notifications (deposit confirmations, withdrawal updates, account alerts)

3.2 Legal and Regulatory Compliance

• Verify your identity and age to ensure you meet the 21+ requirement
• Conduct Know Your Customer (KYC) checks as required by gaming regulations
• Prevent money laundering, terrorist financing, and other financial crimes
• Detect and prevent fraud, collusion, bonus abuse, and account takeovers
• Comply with legal obligations, court orders, and law enforcement requests
• Maintain records for audit and regulatory reporting purposes

3.3 Platform Security and Technical Operations

• Monitor and analyze system performance, uptime, and technical issues
• Detect and prevent cyberattacks, hacking attempts, and security breaches
• Identify and block bots, scrapers, and automated abuse
• Troubleshoot technical problems and improve platform stability
• Conduct disaster recovery and business continuity planning

3.4 Service Improvement and Analytics

• Analyze user behavior and gaming patterns to improve game selection and features
• Conduct A/B testing to optimize user interface and user experience
• Develop new products, services, and promotional offers
• Measure the effectiveness of marketing campaigns and promotional activities
• Generate anonymized and aggregated statistics for business intelligence

3.5 Marketing and Promotional Communications

With your consent, we use your information to:

• Send promotional emails about new games, bonuses, and special offers
• Deliver personalized offers based on your gaming preferences and VIP tier
• Send SMS notifications about time-sensitive promotions (with explicit opt-in)
• Display targeted advertisements on third-party websites and social media platforms
• Invite you to participate in tournaments, contests, and special events

You can opt out of marketing communications at any time by adjusting your account preferences or clicking the unsubscribe link in our emails.

3.6 Responsible Gaming and Player Protection

• Monitor gameplay patterns for signs of problem gambling behavior
• Enforce deposit limits, loss limits, and session time restrictions you set
• Process self-exclusion and cooling-off period requests
• Provide responsible gaming resources and support information

4. Information Sharing and Disclosure

999rt does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data in the following limited circumstances:

4.1 Service Providers and Business Partners

We share data with trusted third-party service providers who perform services on our behalf:

• Payment Processors: Banks, e-wallet providers, and payment gateways (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, etc.) to process deposits and withdrawals
• Game Providers: Software studios that supply casino games, live dealer services, and sports betting platforms
• Identity Verification Services: Third-party KYC verification providers that validate your identity documents
• Customer Support Tools: Live chat platforms, helpdesk software, and communication services
• Cloud Infrastructure: Hosting providers, database services, and content delivery networks that store and serve Platform data
• Analytics and Marketing Services: Tools for website analytics, email marketing, and advertising platforms

All service providers are bound by strict contractual obligations to protect your data and use it only for the specified purposes. They are prohibited from using your information for their own purposes.

4.2 Legal and Regulatory Authorities

We may disclose your personal information when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests
• Cooperate with law enforcement investigations of criminal activity
• Enforce our Terms & Conditions and protect our legal rights
• Protect the safety and security of our users, employees, or the public
• Prevent fraud, money laundering, or other illegal activities

4.3 Business Transfers

In the event that 999rt is involved in a merger, acquisition, asset sale, bankruptcy, or other business transaction, your personal information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our Platform of any change in ownership or control of your personal data.

4.4 Aggregated and Anonymized Data

We may share aggregated, anonymized data that cannot be used to identify individual users with third parties for research, marketing, analytics, and other business purposes. For example, we may publish industry reports showing average RTP across game categories or regional betting trends without revealing individual player identities.

5. Data Security Measures

999rt employs industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

5.1 Technical Security Controls

• Encryption: All data transmissions use 256-bit SSL/TLS encryption. Sensitive data stored in databases is encrypted at rest.
• Firewall Protection: Multi-layered firewall systems protect our servers from external attacks and unauthorized access attempts.
• Intrusion Detection: Real-time monitoring systems detect and respond to suspicious activity, hacking attempts, and security threats.
• Secure Authentication: Passwords are hashed using industry-standard algorithms. Multi-factor authentication is available for enhanced account security.
• Regular Security Audits: Independent security firms conduct penetration testing and vulnerability assessments on our systems.

5.2 Organizational Security Measures

• Access Controls: Only authorized personnel with a legitimate business need can access personal data, subject to role-based permissions.
• Employee Training: All employees receive regular training on data protection, privacy regulations, and security best practices.
• Confidentiality Agreements: Employees and contractors sign strict confidentiality agreements prohibiting unauthorized data disclosure.
• Incident Response: We maintain a comprehensive data breach response plan to quickly identify, contain, and remediate security incidents.

5.3 Your Security Responsibilities

While we implement robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and never share it with anyone
• Log out after each session, especially on shared or public devices
• Enable multi-factor authentication if available
• Monitor your account activity regularly and report suspicious transactions immediately
• Be cautious of phishing emails or fake websites impersonating 999rt
• Keep your registered email and phone number secure and under your sole control

Important Notice: No security system is completely impenetrable. While we use commercially reasonable efforts to protect your data, we cannot guarantee absolute security. If you suspect your account has been compromised, contact our support team immediately at [email protected].

6. Data Retention and Storage

6.1 Retention Principles

999rt retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. The specific retention periods vary depending on the type of data and applicable legal requirements.

6.2 Active Account Data

While your account remains active, we retain all personal information necessary to provide our services, including registration details, transaction history, gaming activity, and customer service records. You can access, update, or correct much of this information through your account settings.

6.3 Closed Account Data

When you close your account, we retain certain personal information for regulatory and legal purposes:

• KYC and Identity Data: Retained for 7 years after account closure to comply with anti-money laundering regulations
• Financial Records: Retained for 7 years for tax compliance, audit requirements, and financial record-keeping obligations
• Gaming History: Retained for 3 years to resolve disputes, investigate fraud, and fulfill regulatory reporting requirements

After the applicable retention period expires, we securely delete or anonymize your personal information so that it can no longer be associated with you.

6.4 Self-Exclusion and Responsible Gaming Data

If you self-exclude from 999rt, we retain your self-exclusion record indefinitely to prevent you from reopening your account during the exclusion period and to honor your request for protection from gambling. This is a legal requirement to support responsible gaming.

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work more efficiently, provide a better user experience, and collect information about browsing behavior.

7.2 Types of Cookies We Use

999rt uses the following types of cookies:

• Essential Cookies: These cookies are necessary for the Platform to function properly. They enable core features like account login, secure transactions, and navigation. You cannot opt out of essential cookies without disabling website functionality.
• Performance Cookies: These cookies collect information about how you use our Platform, such as which pages you visit most often and whether you encounter error messages. This data helps us improve site performance and fix technical issues.
• Functionality Cookies: These cookies remember your preferences (language, currency, game favorites) so you don't have to reset them on each visit.
• Advertising Cookies: These cookies track your browsing across websites to deliver personalized advertisements on third-party sites. We work with advertising partners who use cookies to show relevant 999rt ads to users who have visited our Platform.

7.3 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. However, blocking or deleting essential cookies will impair Platform functionality and may prevent you from accessing certain features. To learn how to manage cookies in your browser, visit your browser's help documentation.

7.4 Other Tracking Technologies

In addition to cookies, we may use:

• Web Beacons: Small graphics embedded in emails and web pages to track whether content was viewed
• Local Storage: Browser storage mechanisms (HTML5 local storage) that retain data locally on your device
• Device Fingerprinting: Techniques to identify devices based on configuration settings, used for fraud prevention and security

8. Your Privacy Rights

Under applicable privacy laws, you have certain rights regarding your personal information. 999rt respects these rights and provides mechanisms for you to exercise them.

8.1 Right to Access

You have the right to request a copy of the personal information we hold about you. To exercise this right, contact our support team at [email protected] with your request. We will provide the information in a structured, commonly used, and machine-readable format within 30 days.

8.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request corrections. You can update most of your account information directly through your account settings. For changes to verified KYC information, contact customer support with supporting documentation.

8.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information in certain circumstances, such as when the data is no longer necessary for the purposes it was collected, or when you withdraw consent. However, we may be required to retain certain information for legal and regulatory compliance (see Section 6 on data retention). We will inform you if we cannot fulfill a deletion request and explain the reason.

8.4 Right to Restrict Processing

You can request that we limit how we use your personal information in certain situations, such as when you contest the accuracy of the data or object to processing. During the restriction period, we will only store your data and will not use it for other purposes without your consent, except for legal claims or protection of rights.

8.5 Right to Data Portability

You have the right to receive your personal information in a portable format and transmit it to another service provider. We will provide your data in CSV or JSON format upon request, covering account details, transaction history, and gaming activity.

8.6 Right to Object

You can object to processing of your personal information based on legitimate interests or for direct marketing purposes. To opt out of marketing communications, adjust your preferences in your account settings or click the unsubscribe link in promotional emails.

8.7 Right to Withdraw Consent

Where we rely on your consent to process personal information (such as for marketing), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before consent was withdrawn.

8.8 How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected] with your request and proof of identity. We will respond within 30 days and may request additional information to verify your identity before fulfilling your request.

9. Children's Privacy

The 999rt Platform is strictly for adults aged 21 and older. We do not knowingly collect personal information from individuals under the age of 21. Our registration process includes age verification, and we require government-issued identification during KYC verification to confirm age eligibility.

If we discover that we have inadvertently collected personal information from a minor, we will immediately delete that information and close the associated account. If you believe a minor has accessed our Platform and provided personal information, please contact us immediately at [email protected] so we can take appropriate action.

Parental Guidance: We encourage parents and guardians to monitor their children's online activities and use parental control software to prevent minors from accessing gambling websites. If you discover that a minor has accessed 999rt using your device or account, contact us immediately.

10. Changes to This Privacy Policy

999rt reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email if you have an active account
• Display a prominent notice on the Platform homepage
• In some cases, request your explicit consent if required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of the Platform after changes are posted constitutes acceptance of the updated Privacy Policy.

11. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Regulatory Complaints: If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with the data protection authority in your jurisdiction.