Cookie Transparency
We log session cookies and analytics trackers openly. You can disable non-essential cookies in account settings without losing access to live tables or slots.
LEGAL REFERENCE
Your data stays yours. Here's how we protect it.
Your account, payment history and personal information are at the centre of what we do. We've built this privacy policy to show you exactly how we collect, store...
Data EncryptionPayment SecurityAccount PrivacyTransparent PracticesYour Control
Privacy Policy Framework & Data Handling
win99 operates across supported regions in Indonesia where local law permits. We collect personal data—your name, email, phone number, payment details and account activity—solely to operate your account, process transactions via QRIS, DANA, OVO and GoPay, and meet local regulatory obligations. Your data is encrypted at rest and in transit. We do not sell or share your information with third parties except
where required by law or to complete payments. You can request access, correction or deletion of your data at any time through our support channels.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
HELP CHANNELS
Privacy Questions? Reach Our Team
Team online
Email Support
Send us your data request or privacy concern via email. Our team responds within 48 hours with full details on how we've handled your information.
In-Account Messaging
Log into your win99 account and start a conversation with our privacy team. They'll walk you through your data, retention periods and deletion options directly.
Regional Legal Contact
For formal data subject requests under Indonesian data protection standards, reach our legal team through the contact form on this page.
EDITORIAL CLARITY
Policy Review & Compliance Markers
Encryption Standard
All payment and personal data use industry-standard TLS 1.2+ encryption. Bank-grade protocols protect your QRIS, DANA, OVO and GoPay credentials...
Local Jurisdiction Compliance
Our privacy framework aligns with Indonesian data protection requirements for gaming platforms in supported regions. Regular audits confirm adherence to...
Third-Party Payment Gatekeways
QRIS, DANA, OVO and GoPay transactions route through certified payment processors. We share only transaction identifiers, never full payment details...
No Data Broker Relationships
We don't sell customer lists, email addresses or gaming history. Your account data stays within win99's infrastructure unless you request...
Retention & Deletion
Account data is retained for the duration of your membership. Close your account and we delete personal records within 90...
Policy Updates & Notification
Material privacy changes are announced via email and in-account notification 30 days before they take effect. You can review prior...
SIDE BY SIDE
How Our Privacy Policy Compares
IP Logging
We record login IPs for fraud detection and account security. This data is retained for 12 months then archived. You can review your login history anytime.
Affiliate & Referral Data
If you sign up via a referral link, we track the source but do not share your full profile with the referrer. Only reward status is exchanged for bonus eligibility.
Player guidance Markers
We track session time and deposit patterns to flag at-risk accounts. If limits are set, we log them and enforce cuts automatically without manual override.
Dispute & Chargeback Records
Payment disputes and chargeback attempts are logged for 36 months. This protects both you and us from fraud. Records are confidential and not shared externally.
Geographic Data Collection
We record your approximate location (country/region level) during login for compliance with supported-region rules. Precise GPS is not collected or stored.
Account Security Events
Failed login attempts, password changes and two-factor authentication toggles are logged. You can review this timeline in your account security centre at any time.
PLATFORM SNAPSHOT
Core Privacy Principles Behind Your Account
01
Minimal Data Collection
We ask only what's required to open your account, verify your identity and process payments. No unnecessary fields. No hidden data requests buried in account setup.
02
Payment Isolation
Your QRIS, DANA, OVO and GoPay credentials are tokenized. We never store full card numbers or wallet details—only transaction tokens tied to your account ID.
03
Session Granularity
Every login, table join, slot spin and cashout is timestamped and logged to your private session history. You own this data and can download it in full.
04
Fraud Detection Without Profiling
We scan for unusual patterns (velocity, location shifts, device changes) but do not build predictive profiles or share signals with external analytics firms.
05
Opt-Out Marketing
Email, SMS and in-app promotions are on by default but you can disable them in one tap. We respect your choice and do not override it without consent.
06
Account Closure & Data Purge
Request account closure anytime. After 90 days, all personal data is deleted. Game history and transaction records may be retained for legal compliance only.
Privacy Policy Questions Answered
Payment credentials are tokenized and encrypted immediately upon entry. We never store full wallet IDs or card numbers. Only transaction tokens and amounts are logged. Payment processors handle the actual credential exchange in compliance with local banking standards.
Yes. Log in to your account and go to Settings → Privacy & Data. You'll see your name, email, phone, account history and session logs. You can also email our support team to request a complete data export in CSV format within 7 days.
Active account data is retained while your account is open. When you close your account, personal data is deleted within 90 days. Transaction records for auditing and legal compliance may be archived for up to 7 years in encrypted storage.
No. We do not sell your account data, email address or gaming history. Data is shared only with payment processors (for transactions) and regulators (where legally required in supported regions). All sharing is logged and you're notified.
Change your password immediately and contact our support team. We investigate within 24 hours. If fraud is detected, affected transactions are reviewed. We log all security incidents and notify you with detailed next steps.
Session cookies keep you logged in. Analytics cookies measure page views and feature usage to improve our platform. Non-essential tracking can be disabled in account settings without affecting gameplay or cashouts.
Partial deletion is limited while your account is active because we need your history for payouts and compliance. Upon account closure, all non-legal-hold data is purged. Contact support for exceptions or specific data concerns.