Privacy Policy

📖1. Definitions

Throughout this Privacy Policy the following terms carry the meanings assigned below:

• "rt99" / "the Company" / "we" / "us" / "our" — the legal entity that owns and operates the website accessible at https://rt99.world and any associated sub-domains or mobile applications.
• "Platform" — the rt99 website, mobile-optimised site, and any application through which betting and gaming services are delivered.
• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, including name, identification number, contact details, financial data, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, transfer, deletion, or disclosure.
• "Player" / "you" / "your" — any individual who registers, accesses, or uses the Platform.
• "Account" — the personal account created upon successful registration on the Platform.
• "KYC" — Know Your Customer; the identity verification process required for account approval and withdrawal processing.
• "Cookie" — a small text file placed on your device by the Platform to store session state, preferences, and analytics data.
• "Third-Party Provider" — an external company whose services (e.g., game software, payment processing, analytics) are integrated into the Platform.

🗂️2. Data We Collect

rt99 collects only the Personal Data necessary to deliver its Services safely and in compliance with applicable international anti-money-laundering (AML) and Know Your Customer (KYC) standards. The categories of data we collect are set out in the table below.

We do not collect sensitive Personal Data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond the photograph required for KYC identity matching.

📥3. How We Collect Your Data

3.1 Directly from You

The majority of your Personal Data is provided by you directly during the following interactions:

• Completing the Account registration form;
• Submitting KYC documents (KTP scan, selfie, bank account proof);
• Initiating deposit or withdrawal transactions;
• Contacting our customer support team via live chat, email, or WhatsApp;
• Configuring responsible gaming preferences in your Account settings;
• Responding to surveys or promotional opt-in forms.

3.2 Automatically via the Platform

When you access the Platform, certain technical and usage data is collected automatically through server logs, cookies, and similar technologies. This includes your IP address, browser fingerprint, device identifiers, and navigation behaviour. See Section 9 (Cookies & Tracking) for full details.

3.3 From Third Parties

We may receive limited data from third-party sources including: identity verification agencies used for KYC cross-checking; payment processors who confirm the status of deposit and withdrawal transactions; game software providers (such as Pragmatic Play and Evolution Gaming) who share game-session outcomes; and fraud-detection services that flag suspicious access patterns.

⚖️4. Legal Basis for Processing

rt99 processes your Personal Data on the following legal bases, which are recognised under internationally accepted data protection frameworks:

• Contractual Necessity: Processing required to provide the Services you have requested — including account management, bet settlement, and payment processing — is necessary for the performance of our contract with you.
• Legal Obligation: Processing required to comply with applicable AML laws, KYC regulations, and international gaming licence conditions is mandatory. We cannot waive these obligations.
• Legitimate Interests: Processing for fraud prevention, Platform security, responsible gaming monitoring, and service improvement is conducted on the basis of our legitimate interests, provided those interests do not override your fundamental rights.
• Consent: Processing for marketing communications (promotional emails, SMS, WhatsApp offers) is conducted only with your prior, freely given consent. You may withdraw consent at any time through your Account settings.

🔧5. How We Use Your Data

rt99 uses your Personal Data for the following specific purposes only:

5.1 Account and Service Management

To create and maintain your Account, verify your identity and age (21+), process deposits and withdrawals through your nominated Indonesian bank or e-wallet, settle bets, calculate and credit bonuses, and handle Account queries and disputes.

5.2 Security and Fraud Prevention

To detect and prevent unauthorised account access, identify fraudulent deposit or withdrawal patterns, enforce our single-account policy, and block access from IP addresses associated with automated attack tools or prohibited jurisdictions.

5.3 Regulatory Compliance

To fulfil our obligations under the AML and KYC requirements imposed by our international gaming licences, including the retention of identity documents and transaction records for the periods mandated by those licences.

5.4 Responsible Gaming

To monitor betting patterns for signs of problem gambling behaviour, enforce deposit limits and self-exclusion settings, and alert our responsible gaming team when a player's activity triggers internal safeguard thresholds.

5.5 Platform Improvement

To analyse aggregated, anonymised usage data to improve Platform performance, user interface design, game selection, and payment method availability.

5.6 Marketing Communications (Consent Required)

To send you personalised promotional offers, tournament announcements, and seasonal bonus notifications — including those tied to Indonesian cultural events such as Idul Fitri, Chinese New Year (Imlek), and Independence Day — via email, SMS, or WhatsApp, where you have opted in to receive such communications.

🤝6. Data Sharing and Disclosure

6.1 Third-Party Service Providers

rt99 engages a limited number of trusted third-party service providers who process Personal Data strictly on our behalf and under our written instructions. These providers are contractually bound to maintain data confidentiality and may not use your data for their own purposes. Categories of such providers include:

• Identity Verification Agencies: Used to cross-check KTP and passport data during KYC review;
• Payment Processors: Banks and e-wallet operators (including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) who handle transaction execution;
• Game Software Providers: Companies such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, who receive session identifiers necessary to run game rounds;
• Fraud Detection and Cybersecurity Services: Providers whose tools help identify suspicious login attempts, bot activity, and multi-account behaviour;
• Analytics Platforms: Services that process anonymised, aggregated usage data to help us understand how the Platform is navigated and used.

6.2 Legal and Regulatory Disclosure

rt99 will disclose Personal Data to competent authorities, regulators, or law enforcement agencies where required to do so by applicable law, court order, or the terms of our international gaming licence. We will, where legally permitted, notify you of any such disclosure request before complying.

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or restructuring of the Company, your Personal Data may be transferred to the acquiring entity as part of the transaction. We will notify you by email prior to such a transfer and provide an opportunity to request Account deletion before the transfer takes effect.

6.4 No Sale of Personal Data

rt99 does not and will not sell, trade, or otherwise transfer your Personal Data to third parties for commercial gain. We do not participate in data broker marketplaces or third-party advertising networks that use your personal information for retargeting.

🗓️7. Data Retention

We retain your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and contractual obligations. The retention periods below reflect our standard practice:

Once a retention period expires, data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical purposes.

🛡️8. Security Measures

rt99 implements a layered security architecture designed to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. Our key security controls include:

• SSL/TLS Encryption: All data transmitted between your device and the rt99 Platform is encrypted using 256-bit SSL/TLS protocols, preventing interception during transit;
• Encryption at Rest: Sensitive data stored in our databases — including identity documents and financial records — is encrypted using AES-256 at the storage layer;
• Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis. Staff with access undergo background checks and mandatory data protection training;
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their Accounts. Administrative systems at rt99 require 2FA by default for all staff;
• Intrusion Detection Systems: Automated monitoring tools scan for unusual access patterns, brute-force login attempts, and data exfiltration signals around the clock;
• Regular Security Audits: Our Platform undergoes periodic penetration testing and vulnerability assessments conducted by independent cybersecurity firms;
• Incident Response Plan: In the event of a confirmed data breach, rt99 will notify affected players within 72 hours of becoming aware of the incident and will describe the nature of the breach, the data affected, and the steps taken to mitigate harm.

🍪9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. rt99 uses cookies and similar technologies (local storage, session tokens, pixel tags) to keep you logged in, remember your preferences, and gather analytics data that helps us improve the Platform.

9.2 Types of Cookies We Use

9.3 Managing Cookies

You may configure your browser to refuse all or some cookies, or to alert you when a cookie is being set. Please note that disabling strictly necessary cookies will prevent the Platform from functioning correctly — you will not be able to log in or place bets. Analytics and functional cookies can be declined without affecting core functionality. Refer to your browser's help documentation for instructions on adjusting cookie settings.

✋10. Your Data Rights

Subject to applicable law and our regulatory obligations, you have the following rights in respect of your Personal Data held by rt99:

• Right of Access: You may request a copy of all Personal Data we hold about you, together with information about how it is processed.
• Right to Rectification: You may ask us to correct any inaccurate or incomplete Personal Data. For name and date-of-birth corrections, updated KYC documents will be required.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to our overriding legal retention obligations (see Section 7).
• Right to Restriction: You may ask us to suspend processing of your data while a rectification or objection request is under review.
• Right to Data Portability: You may request a machine-readable copy of Personal Data you have provided to us, in a structured, commonly used format (e.g., CSV).
• Right to Object: You may object to processing based on our legitimate interests. We will cease such processing unless we can demonstrate compelling grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time via your Account settings. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact our Data Protection team by email at [email protected] with the subject line "Data Rights Request." We will respond within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 60 days and will notify you accordingly.

🔞11. Minors and Age Restriction

The rt99 Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect Personal Data from persons under the age of 21. During the registration process, players are required to confirm their age, and KYC verification confirms age via government-issued identity documentation.

If we become aware that Personal Data belonging to a person under 21 has been collected — whether through underage registration or misrepresentation — we will immediately suspend the Account, delete all associated Personal Data, reverse any transactions where legally permissible, and, where appropriate, notify relevant authorities. Parents or guardians who believe a minor has registered on rt99 should contact us immediately at [email protected].

🌏12. International Data Transfers

rt99 operates servers and engages service providers located in multiple jurisdictions. As a result, your Personal Data may be transferred to and processed in countries outside Indonesia. Where such transfers occur, rt99 applies appropriate safeguards to ensure your data receives a standard of protection consistent with internationally recognised data protection principles, including:

• Contractual data processing agreements with all third-party providers that set minimum security and confidentiality standards;
• Transferring data only to providers located in jurisdictions with adequate data protection frameworks, or who have committed to equivalent standards;
• Applying encryption and access controls that remain effective regardless of where data is physically stored.

By using the Platform, you acknowledge that your Personal Data may be transferred outside Indonesia as described in this section.

📌13. Changes to This Privacy Policy

rt99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the Services we provide. Material changes — those that significantly affect your rights or how your core data is used — will be communicated to you by email to your registered address and by a prominent notice on the Platform no less than 14 calendar days before the revised Policy takes effect.

Non-material updates (such as typographical corrections or clarifications that do not alter your rights) will be reflected in the "Last Updated" date at the top of this page without individual notification. We encourage you to review this Privacy Policy periodically to stay informed of how we protect your data.

Your continued use of the Platform after the stated effective date of any revision constitutes your acceptance of the updated Privacy Policy.

📬14. Contact and Data Protection Enquiries

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy concern, please contact us through any of the following channels:

• Email (Privacy / Data Rights): [email protected] — use the subject line "Privacy Enquiry" or "Data Rights Request" for fastest routing.
• 24/7 Live Chat: Available from your Account dashboard — ask to be connected to the Data Protection team for privacy-specific matters.
• Response Time: We aim to acknowledge all privacy enquiries within 2 business days and to provide a substantive response within 30 calendar days.

For enquiries related to responsible gaming, self-exclusion, or deposit limits, please visit our dedicated Responsible Gaming page or mention "Responsible Gaming" in your support message.