Privacy Policy

jkt99 ("we", "us", "our") operates the online gaming and betting platform accessible at https://jkt99.app (the "Platform"). This Privacy Policy describes our practices regarding the collection, processing, storage, and disclosure of personal data belonging to registered Members and visitors ("you") of the Platform.

jkt99 is committed to handling personal data responsibly and in accordance with internationally recognised data protection principles. We implement technical and organisational measures designed to safeguard your information against unauthorised access, loss, or misuse. Our platform caters primarily to players based across Indonesia — including major cities such as Jakarta, Surabaya, Bandung, Medan, Semarang, Bali, and Yogyakarta — and we are acutely aware of the trust our Members place in us when sharing their personal information.

This policy should be read alongside our Terms & Conditions, which govern your use of the Platform more broadly. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a privacy-specific matter, this Privacy Policy takes precedence.

We collect several categories of personal data in the course of operating the Platform. The table below summarises each category, its purpose, and examples of specific data points within that category:

jkt99 collects personal data through the following channels:

• Direct interactions: Data you voluntarily provide when you register an Account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or respond to a promotional communication.
• Automated technologies: Data collected automatically as you browse and interact with the Platform, including via cookies, server logs, device fingerprinting, and session-tracking technologies. See Section 7 (Cookies & Tracking) for more detail.
• Third-party sources: Data received from identity verification service providers (used for KYC), payment processors (used to confirm transaction status), fraud-detection partners, and — where applicable — marketing attribution partners who indicate how you first discovered jkt99.
• Public sources: In limited circumstances, jkt99 may cross-reference data against publicly available registers or databases as part of its anti-money-laundering (AML) or sanctions-screening obligations.

We use the personal data we collect for the following purposes. Where multiple legal bases apply to a single purpose, the primary basis is indicated in Section 5 (Legal Basis):

• Account creation and management: To register your Account, authenticate your identity, maintain your balance, process deposits and withdrawals in IDR, and administer bonus eligibility.
• KYC and age verification: To confirm that you are at least 21 years of age and that your identity matches the payment methods associated with your Account, as required for withdrawal processing.
• Transaction processing: To receive IDR deposits from and send IDR withdrawals to your verified Indonesian bank accounts (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, and others) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, duplicate accounts, and other prohibited conduct as described in our Terms & Conditions.
• Customer support: To respond to your enquiries, resolve disputes, process responsible gaming requests (such as self-exclusion or deposit limit adjustments), and maintain records of support interactions.
• Responsible gaming monitoring: To identify patterns of gambling behaviour that may indicate problem gambling, and to deliver timely interventions such as session reminders, limit notifications, and support referrals.
• Marketing and promotional communications: To send you information about relevant promotions, bonuses, new game releases, and seasonal offers — subject to your communication preferences and applicable opt-out rights.
• Platform analytics and improvement: To understand how Members use the Platform, identify usability issues, optimise game presentation, and develop new features that better serve the Indonesian player community.
• Legal and regulatory compliance: To fulfil our obligations under applicable laws and regulations, respond to valid legal process, and cooperate with law enforcement authorities where required.

jkt99 processes your personal data on the following legal grounds:

jkt99 does not sell your personal data to third parties. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors and banking partners: We share the financial data necessary to process your deposits and withdrawals with our payment processing partners, including the Indonesian banks and e-wallet providers you use (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja, and card networks Visa and Mastercard).
• KYC and identity verification providers: We share identity document data and biometric liveness-check data with specialist KYC service providers operating under strict data processing agreements that limit their use of your data to verification purposes only.
• Game content suppliers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymised or pseudonymised session data necessary to deliver and audit game outcomes. Full identity data is not shared with game studios.
• Fraud and AML screening services: We work with specialist fraud-prevention and sanctions-screening providers who process Technical Data and limited Identity Data to protect the Platform against financial crime.
• Professional advisers: Our legal counsel, auditors, and accountants may access your data on a strictly need-to-know basis and are bound by professional confidentiality obligations.
• Law enforcement and regulatory authorities: We will disclose your personal data to the relevant authorities where required to do so by valid legal process, court order, or applicable law, or where we believe in good faith that disclosure is necessary to prevent a serious crime or protect the safety of a person.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of jkt99's business, personal data held about Members may be transferred to the successor entity. We will notify you via the email address on your Account if such a transfer occurs and if it materially affects how your data is processed.

jkt99 uses cookies and similar technologies (such as pixel tags, local storage, and session tokens) to operate the Platform effectively and to enhance your experience. The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. You cannot opt out of these without ceasing to use the Platform.
• Functional cookies: Remember your preferences, such as your selected language, preferred deposit method, and notification settings, so you do not need to re-enter them on each visit.
• Analytics cookies: Help us understand aggregate usage patterns — which game categories attract the most engagement, where Members encounter friction in the deposit flow, and how page performance varies across different devices used in Indonesia. The data collected via analytics cookies is pseudonymised wherever possible.
• Marketing and attribution cookies: Where you arrived at jkt99 via a tracked referral link, a marketing cookie records the attribution source so that our promotional partners can be correctly credited. These cookies do not share your personal identity with advertising networks.

You may manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using the Platform but may limit personalisation features. Disabling strictly necessary cookies will impair Platform functionality and may prevent you from logging in.

We retain personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the following retention principles:

• Active Account data: Retained for the full duration of your Account's existence on the Platform, plus a minimum of five (5) years following permanent Account closure, in order to comply with AML record-keeping obligations and to handle potential disputes or legal proceedings.
• KYC documents: Retained for a minimum of five (5) years from the date of verification or from the date of Account closure, whichever is later, in line with international AML best practice.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support correspondence: Retained for three (3) years from the date of resolution of each case, unless the correspondence is directly relevant to an ongoing dispute or investigation.
• Marketing preference data: Retained until you withdraw consent or close your Account, whichever occurs first.
• Technical and usage data: Typically retained in identifiable form for up to twenty-four (24) months, after which it is either deleted or fully anonymised for aggregate analytical use.

When personal data is no longer required for any retained purpose, it is securely deleted or irreversibly anonymised in accordance with our internal data lifecycle policy.

jkt99 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our key security measures include:

• 256-bit TLS/SSL encryption: All data transmitted between your device and the jkt99 Platform is encrypted in transit using industry-standard TLS 1.2 or higher. Our SSL certificate is maintained and renewed continuously.
• Encryption at rest: Sensitive personal data — including KYC documents and financial identifiers — is stored using AES-256 encryption at rest on our servers.
• Access controls: Access to personal data held within jkt99's systems is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions, and all access events are logged and audited.
• Two-factor authentication (2FA): Members are strongly encouraged to enable 2FA on their Accounts. All jkt99 administrative accounts are mandatorily protected by 2FA.
• Intrusion detection and monitoring: Our infrastructure is monitored continuously for anomalous activity, including unusual login attempts, rapid balance changes, and atypical API call patterns.
• Penetration testing: jkt99 commissions regular independent security assessments and penetration tests of its platform and infrastructure.
• Incident response: In the event of a data breach that poses a risk to Members, jkt99 will notify affected individuals via the email address on their Account as promptly as practicable.

As a Member of jkt99, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at the details provided in Section 15:

• Right of access: You may request a copy of the personal data we hold about you, including a summary of how it is being used.
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data held on your Account. For minor corrections (such as a misspelled city name), you can update these directly in your Account settings. For identity-document data, a formal rectification request to our support team is required.
• Right to erasure: You may request deletion of your personal data where we no longer have a lawful basis for retaining it. Please note that this right is subject to our legal retention obligations — in particular, AML and KYC records must be retained for the periods described in Section 8 and cannot be erased on request during those periods.
• Right to restrict processing: You may request that we pause the processing of your personal data while a rectification or objection request is being assessed.
• Right to data portability: You may request a structured, machine-readable export of the personal data you have provided to jkt99 directly (such as Account registration data and transaction history).
• Right to object: You may object to our processing of your data where that processing is based on our legitimate interests. Where we cannot demonstrate a compelling legitimate interest that overrides your objection, we will cease that specific processing.
• Right to withdraw consent: Where we rely on your consent as the legal basis for processing (primarily for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

We will respond to all rights requests within a reasonable timeframe and in any event within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days with appropriate notice to you.

The jkt99 Platform is strictly for adults aged 21 and above. We do not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. If we discover, at any point during the Account lifecycle, that personal data belonging to a minor has been submitted — whether through misrepresentation during registration or otherwise — we will immediately suspend the relevant Account, delete the minor's personal data to the extent not required for fraud-prevention or legal purposes, and report the matter to our internal compliance team.

The jkt99 Platform integrates third-party services in order to deliver a complete gaming experience. These include game content from studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft; payment services from Indonesian banks and e-wallet providers; and analytics tools used to monitor Platform performance.

Each of these third-party services operates under its own privacy practices and terms. While jkt99 takes care to work only with reputable providers and to impose appropriate data-protection obligations contractually, we are not responsible for the privacy practices of third-party services once data leaves our direct control. We encourage you to review the privacy policies of any third-party provider whose services you use in connection with your jkt99 Account.

jkt99 is an international platform. In the ordinary course of operating the Platform, your personal data may be processed by servers, staff, or third-party service providers located outside Indonesia. Where such international transfers occur, jkt99 takes steps to ensure that your data continues to receive an adequate level of protection, including through the use of contractual safeguards equivalent to Standard Contractual Clauses, vendor due diligence, and encryption of data in transit and at rest.

By accepting these terms and using the Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Indonesia as described in this Policy.

jkt99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or the features and services we offer. The effective date at the top of this page will be updated whenever a material change is made.

Where changes are material — for example, where we introduce a new category of data collection or change the way we share data with third parties — we will notify you via the email address associated with your Account prior to the change taking effect. For minor, non-material amendments (such as typographical corrections or clarifications that do not alter the substance of our practices), notification may not be provided.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should discontinue using the Platform and contact our support team to close your Account and arrange the return of any available Balance.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data jkt99 holds about you, please reach out to our support team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the live chat widget on the jkt99 Platform, staffed by Indonesian-speaking agents who are able to assist with data privacy enquiries.

We target a first response to all privacy-related email enquiries within 48 hours (WIB business hours). Data rights requests (access, erasure, portability) will be acknowledged within 5 business days and fulfilled within 30 days, subject to the complexity of the request.