At 999rp, your privacy is not an afterthought — it is a core commitment. This Privacy Policy explains exactly what personal data we collect from Indonesian players, why we collect it, how we use and protect it, and what rights you have over your information.
999rp ("we", "us", "our") operates the online betting and gaming platform accessible at 999rp.bet. As part of operating this platform, we collect and process personal data relating to our Members and website visitors. We are committed to handling that data responsibly, transparently, and in accordance with applicable data protection laws and international best practices.
This Privacy Policy applies to all personal data collected through the 999rp website, mobile web experience, live chat support system, and any other channel through which you interact with us. It applies to registered Members, prospective Members who browse the Platform without registering, and anyone who contacts 999rp support.
By registering an account on 999rp or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree, you should discontinue use of the Platform and may request account closure in accordance with our Terms & Conditions.
This Privacy Policy should be read alongside the 999rp Terms & Conditions and Responsible Gaming policy, which together constitute the full framework governing your relationship with 999rp.
For the purposes of this Privacy Policy, the following definitions apply:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, date of birth, national identity number, email address, device identifiers, and financial data. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, and deletion. |
| "Data Controller" | 999rp, as the entity that determines the purposes and means of processing your personal data. |
| "Data Processor" | Any third party engaged by 999rp to process personal data on its behalf (e.g., payment processors, KYC providers). |
| "Member" / "You" | Any individual who has registered an account on 999rp, or who accesses the Platform without registration. |
| "Sensitive Data" | A subset of personal data that warrants heightened protection, including but not limited to financial account details and government-issued identification numbers. |
| "Cookies" | Small text files placed on your device by the 999rp Platform to facilitate session management, analytics, and personalisation. |
999rp collects personal data in the following categories:
999rp collects personal data through the following methods:
The table below sets out each primary purpose for which 999rp processes your personal data, together with the legal basis on which that processing rests:
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, contact | Contract performance |
| Age and identity verification (KYC) | Identity, KYC documents | Legal obligation; contract performance |
| Processing deposits and withdrawals | Financial, identity | Contract performance |
| Fraud prevention and AML compliance | Financial, technical, identity | Legal obligation; legitimate interests |
| Responsible gaming monitoring | Financial, behavioural | Legal obligation; legitimate interests |
| Customer support | Identity, communications | Contract performance |
| Platform security and integrity | Technical, device | Legitimate interests |
| Personalisation and product improvement | Technical, behavioural | Legitimate interests; consent |
| Promotional communications (opt-in only) | Contact, behavioural | Consent |
Where 999rp relies on your consent as the legal basis for processing (for example, sending promotional emails), you have the right to withdraw that consent at any time by updating your notification preferences within Account settings or by contacting our support team. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
999rp does not sell your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:
We engage a select number of trusted third-party service providers to process data on our behalf. These include:
All Data Processors engaged by 999rp are bound by written data processing agreements that require them to process personal data only on 999rp's documented instructions, maintain appropriate security standards, and not engage sub-processors without prior authorisation.
999rp may disclose personal data to relevant regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, valid legal process, or where disclosure is necessary to protect the rights, property, or safety of 999rp, its Members, or the public. We will, where legally permissible, notify you of such a disclosure request before complying.
In the event that 999rp undergoes a merger, acquisition, reorganisation, or sale of assets, personal data held by 999rp may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms applicable to your data under the new structure before the transfer takes effect.
999rp retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and identity data | Duration of membership + 5 years after closure | AML compliance, dispute resolution |
| KYC documents | Duration of membership + 5 years after closure | Regulatory and licensing obligations |
| Financial transaction records | Duration of membership + 7 years after closure | Financial record-keeping requirements |
| Betting and wagering history | Duration of membership + 5 years after closure | Dispute resolution, responsible gaming |
| Support communications | 3 years from the date of the last interaction | Quality assurance, dispute resolution |
| Technical and device logs | 12 months on a rolling basis | Security monitoring, fraud detection |
| Marketing consent records | Until consent is withdrawn + 1 year | Proof of consent compliance |
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Anonymised data may be retained for analytical and statistical purposes without restriction.
The 999rp Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. The categories of cookies we use are as follows:
These cookies are essential for the Platform to function. They manage your login session, maintain your Account state across pages, and support security features such as fraud detection. These cookies cannot be disabled without breaking core platform functionality.
These cookies collect anonymised or pseudonymised data about how Members use the Platform — such as which pages are visited most frequently and where technical errors occur. This data is used exclusively to improve the Platform experience. We use reputable analytics tools operating under data processing agreements that prohibit the use of this data for third-party advertising.
These cookies remember your preferences — such as your preferred language, game lobby layout, or notification settings — to provide a more personalised experience on return visits. Functional cookies do not track your activity across external websites.
You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies will impair your ability to use the 999rp Platform, including the ability to log in and place bets. Detailed browser-specific instructions for managing cookies are available from your browser provider's help documentation.
999rp applies industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our key security measures include:
Despite these measures, no data transmission over the internet or electronic storage system is entirely impervious to risk. You are responsible for maintaining the security of your own Account credentials. If you suspect that your Account has been compromised, please contact 999rp support immediately.
In the event of a data breach that is likely to result in a high risk to your rights and freedoms, 999rp will notify affected Members without undue delay and in accordance with applicable breach notification requirements.
As a 999rp Member and a data subject, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at the details provided in Clause 15.
999rp respects your right to control how your personal data is used. The following rights are available to all Members and may be exercised free of charge by contacting our support team.
You may request a copy of all personal data 999rp holds about you. We will provide this within 30 days of a verified request, in a clear and structured format.
If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated. We will action verified corrections within 14 days.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
In certain circumstances, you may ask us to restrict the processing of your data — for example, while the accuracy of data you have disputed is being verified.
Where processing is based on your consent or on a contract, you may request your data in a commonly used, machine-readable format for transfer to another provider.
You may object at any time to processing based on legitimate interests, including direct marketing. We will cease that processing unless we can demonstrate compelling grounds that override your interests.
999rp's primary servers are located in jurisdictions with robust data protection frameworks. Some of our third-party service providers — including certain game studios and KYC verification providers — may process data in jurisdictions outside Indonesia. Where such transfers occur, 999rp ensures that appropriate safeguards are in place, which may include:
You may request details of the safeguards applied to any specific international transfer by contacting 999rp using the details in Clause 15.
As part of our KYC process, 999rp verifies the age of all Members before processing their first withdrawal. Where we become aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, void all bets, and delete the data collected in accordance with our data deletion procedures. Any real-money balance deposited by an underage Member will be returned to the original payment source where technically feasible.
If you are a parent or guardian and believe that a minor in your care has accessed 999rp and provided personal data, please contact our support team immediately so that we can investigate and take appropriate action.
The 999rp Platform may contain references to game studios, payment providers, and sports data services operated by third parties. Where such references involve directing you to a third-party environment (for example, a live casino game interface hosted by a game studio), that environment is governed by the third party's own privacy policy. 999rp is not responsible for the data practices of third-party operators and encourages you to review the relevant privacy policies before engaging with any third-party environment.
999rp reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform functionality. When material changes are made, we will notify you by posting a prominent notice on the 999rp Platform and, where practicable, by sending a notification to the email address registered on your Account.
The "Last Updated" date at the top of this document reflects when the most recent version took effect. We encourage you to review this Privacy Policy periodically. Continued use of the Platform following notification of a material change constitutes your acceptance of the updated Policy.
Prior versions of this Privacy Policy are available on request by contacting the 999rp Data Protection team.
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 999rp handles your personal data, please contact us through the following channels:
When submitting a data subject rights request, please include your full registered name, the email address associated with your 999rp Account, and a clear description of the right you wish to exercise. Identity verification will be required before any request is processed to prevent unauthorised access to Member data.
Beyond the legal framework above, here is what our privacy commitment looks like in everyday platform operations for every 999rp Member.
Every data exchange between your device and 999rp servers is protected by SSL 256-bit encryption. Whether you are logging in, making a deposit via BCA or GoPay, or reviewing your transaction history, your data travels over a fully encrypted connection.
Your personal data is never sold to advertising networks, data brokers, or unaffiliated third parties. The only entities that access your data are those strictly necessary to operate the 999rp platform — bound by written data processing agreements.
We request only the data we genuinely need. Registration requires your name, date of birth, email, and residential address. Additional data such as KYC documents is collected only when you initiate your first withdrawal — not upfront.
999rp will only send you promotional communications if you have explicitly opted in. You can withdraw your consent at any time from Account settings. We will never send unsolicited marketing messages to Members who have not consented.
In the unlikely event of a data security incident, 999rp's incident response team will act immediately to contain the breach, assess its scope, and notify affected Members and relevant authorities within the timeframes required by applicable law.
The 999rp support team includes trained data protection specialists reachable 24/7 via live chat. Whether you want to access your data, request a correction, or raise a privacy concern, our team responds in English with full case-tracking from first contact to resolution.
999rp combines enterprise-grade data protection with the best sportsbook, casino, slot, and togel experience available to Indonesian players. Explore the platform or review our other policies below.
21+ Only · Play Responsibly · SSL 256-Bit Encrypted · Licensed & Regulated Internationally