Your privacy matters to us. This Privacy Policy explains what personal data rt99k collects, how we use it, who we share it with, how long we retain it, and what rights you hold over your information as a player on our platform.
rt99k ("we", "us", "our") is committed to protecting the privacy and personal data of all users ("you", "your") who access the rt99k platform at https://rt99k.net. This Privacy Policy has been prepared in accordance with internationally recognized data protection principles and describes our practices with respect to the collection, use, storage, sharing, and deletion of personal data.
This Privacy Policy applies to all personal data collected through the rt99k website, mobile-optimized interface, customer support channels, and any other touchpoints through which you interact with rt99k. It should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and rt99k.
By registering an account on rt99k, completing the identity verification process, making a deposit, or otherwise actively using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to our data processing activities as described herein. If you do not agree with any aspect of this Policy, please discontinue use of the platform and contact us to request account closure.
rt99k is operated by an internationally incorporated entity holding a valid gaming license issued by a recognized international gaming regulatory authority. In data protection terms, rt99k acts as the data controller in respect of personal data collected from users of the platform — meaning we determine the purposes for which and the means by which your personal data is processed.
Where rt99k engages third-party service providers to process personal data on our behalf (for example, payment processors, KYC verification vendors, and analytics providers), those parties act as data processors under written agreements that require them to process data only as instructed by rt99k and to maintain appropriate security standards. rt99k retains full responsibility for the lawfulness of the processing that those processors carry out on our behalf.
For all data protection inquiries, requests, or complaints, please contact our Data Protection team at: support [at] rt99k.net with the subject line "Data Protection Request".
rt99k collects the minimum personal data necessary to operate a secure, compliant, and functional online betting platform. The categories of personal data we collect are described in the table below:
| Data Category | Specific Data Points | Mandatory? |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID number (KTP), passport number or driver's license number (where provided as alternative ID) | Yes — required for KYC |
| Contact Data | Email address, Indonesian mobile telephone number, residential address | Yes — required for account |
| Account Data | Username, hashed password, account preferences, language/currency settings, marketing preferences | Yes — required for account |
| Financial Data | Bank account number and name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP), e-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal records | Yes — required for payments |
| Verification Documents | Scanned or photographed copies of government-issued ID, proof of address documents, selfie photographs for liveness checks | Yes — required for KYC |
| Usage Data | Game history, bet history, session duration, pages visited, features used, search queries within the platform | Automatic — generated by use |
| Technical Data | IP address, device type and model, operating system, browser type and version, screen resolution, time zone setting | Automatic — generated by use |
| Communications Data | Records of support chat conversations, email correspondence, feedback submissions | Generated when you contact us |
| Marketing Data | Promotional preferences, bonus uptake history, campaign response data | Optional — based on your consent |
rt99k collects personal data through the following channels and mechanisms:
You provide data directly to rt99k when you: register an account; complete the KYC identity verification process; make a deposit or request a withdrawal; contact our customer support team; respond to a promotional offer or survey; or update your account profile settings. The data you submit through these interactions is collected and stored in accordance with this Policy.
When you access and use the rt99k platform, we automatically collect technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This data includes your IP address, device identifiers, session timestamps, pages visited, games played, and in-session behavior. This automated collection occurs whether or not you are logged into your account, though it is more comprehensive during authenticated sessions.
rt99k may receive personal data about you from third-party sources in the following contexts:
rt99k processes personal data only where a valid legal basis exists. The following table sets out the primary purposes for which we process your data and the corresponding legal basis for each:
| Processing Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account creation and management | Identity, Contact, Account | Performance of contract |
| Identity and age verification (KYC) | Identity, Verification Documents | Legal obligation; Contract |
| Processing deposits and withdrawals | Financial, Identity | Performance of contract |
| Fraud detection and prevention | Technical, Usage, Financial | Legitimate interests |
| Anti-money laundering (AML) compliance | Identity, Financial, Communications | Legal obligation |
| Responsible gaming monitoring | Usage, Account, Financial | Legal obligation; Legitimate interests |
| Customer support delivery | Identity, Contact, Communications | Performance of contract |
| Promotional communications | Contact, Marketing | Consent |
| Platform analytics and improvement | Technical, Usage | Legitimate interests |
| Legal proceedings and regulatory reporting | All categories as required | Legal obligation |
Where processing is based on legitimate interests, rt99k has carried out a balancing assessment to confirm that our interests do not override your fundamental rights and freedoms. Where processing is based on consent (primarily for marketing communications), you have the right to withdraw that consent at any time via your account marketing preferences or by contacting support.
rt99k does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data with third parties only in the following circumstances:
We engage carefully vetted third-party vendors to provide services on our behalf. These include KYC and identity verification platforms, payment gateway operators, cloud infrastructure and hosting providers, customer support software providers, email delivery services, and analytics platforms. Each of these providers is bound by a data processing agreement that restricts their use of your data to the specific service they are engaged to perform.
When you make a deposit or request a withdrawal, rt99k shares the minimum necessary financial and identity data with the relevant bank or e-wallet provider (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja) to process the transaction. These institutions are independently regulated and operate under their own privacy policies.
rt99k may disclose personal data to law enforcement agencies, regulatory bodies, tax authorities, or courts where we are legally required to do so, or where we believe in good faith that disclosure is necessary to prevent fraud, money laundering, or other criminal activity. rt99k will notify you of any such disclosure to the extent permitted by applicable law.
In the event of a merger, acquisition, restructuring, or sale of all or part of rt99k's business assets, personal data held by rt99k may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it, prior to the transfer taking effect.
rt99k may share your data with additional third parties in circumstances not described above, but only with your explicit, informed consent obtained at the time of the proposed sharing.
rt99k uses cookies and similar tracking technologies to operate, personalize, and improve the platform experience. The following categories of cookies are used:
These cookies are essential for the platform to function correctly. They manage your login session, maintain your account state during a game session, support security features, and enable core navigation. Strictly necessary cookies cannot be disabled without breaking the platform's core functionality.
These cookies collect anonymized or pseudonymized information about how users interact with the platform — including which pages are visited most frequently, which games are played, and where technical errors occur. This data is used exclusively to improve platform performance and user experience. rt99k uses internal analytics tools and may engage third-party analytics providers bound by data processing agreements.
Functional cookies remember your preferences — such as your preferred deposit method, notification settings, and any responsible gaming limits you have set in your account dashboard. These cookies enhance convenience but are not strictly required for basic platform access.
With your consent, rt99k may use cookies to track your engagement with promotional content and to serve relevant advertising. You may withdraw consent for marketing cookies at any time via your account cookie preferences. Withdrawing this consent will not affect the lawfulness of any processing that occurred before withdrawal.
rt99k retains personal data for as long as is necessary to fulfill the purposes described in this Privacy Policy, subject to the following minimum retention periods:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Identity & KYC Documents | 5 years after account closure | AML and regulatory compliance obligations |
| Financial Transaction Records | 5 years after each transaction | AML, audit, and dispute resolution requirements |
| Account & Profile Data | Duration of account + 2 years | Contract performance and legitimate interests |
| Game & Bet History | 3 years after account closure | Dispute resolution, responsible gaming monitoring |
| Support Communications | 3 years after last interaction | Dispute resolution and service improvement |
| Marketing Preferences | Until consent withdrawn or account closed | Consent-based processing |
| Technical & Log Data | 13 months from collection | Security monitoring and analytics |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be attributed to any individual. Where data must be retained beyond these periods due to an ongoing legal dispute, regulatory investigation, or law enforcement request, it will be retained until that matter is fully resolved.
rt99k implements a comprehensive, layered information security program to protect personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:
As a data subject, you hold a range of rights in relation to the personal data rt99k holds about you. These rights are described below. To exercise any of these rights, please contact us at support [at] rt99k.net with the subject line "Data Rights Request". We will respond within 30 calendar days of receiving a valid request.
You have the right to request a copy of all personal data rt99k holds about you, along with information about how it is processed. This is sometimes referred to as a Subject Access Request (SAR). We will provide this information in a structured, commonly used, machine-readable format where practicable.
If any personal data rt99k holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Many data points — such as your contact details and address — can be updated directly through your account profile settings without contacting support.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing based on legitimate interests and we cannot demonstrate an overriding interest. This right is subject to our legal retention obligations — data we are required by law to retain (e.g., AML records) cannot be deleted on request alone.
In certain circumstances — such as where you contest the accuracy of your data, or where processing is unlawful but you prefer restriction over deletion — you may request that rt99k restrict processing of your data. During a restriction period, rt99k will store the data but not actively process it, except with your consent or for legal claims.
Where processing is based on your consent or on a contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller without hindrance from rt99k.
You have the right to object to processing of your personal data where rt99k relies on legitimate interests as its legal basis. You also have an absolute right to object to processing of your data for direct marketing purposes, including profiling for marketing. Upon receipt of a valid marketing objection, rt99k will cease all marketing communications immediately.
rt99k uses automated systems for fraud detection and responsible gaming monitoring. Where a solely automated decision produces a significant legal or similarly significant effect on you — such as account suspension triggered by automated fraud scoring — you have the right to request human review of that decision, to express your point of view, and to contest the outcome.
rt99k's Services are intended exclusively for adults aged 21 years and older. rt99k does not knowingly collect personal data from individuals under the age of 21 and takes a zero-tolerance approach to underage access.
As part of our KYC process, all registered users are required to provide documentary proof of age before withdrawal privileges are activated. In addition, our platform employs automated age-estimation screening during the account registration process as an additional layer of protection.
If rt99k becomes aware — through KYC review, a report from a third party, or any other means — that a user is under the age of 21, we will immediately suspend the account, void any open bets, and initiate a review of the account's transaction history. Any funds deposited by a minor will be returned to the source payment method, net of any gaming losses incurred, which will be forfeited.
If you are a parent or guardian and believe that your child has registered an account with rt99k, please contact us immediately at support [at] rt99k.net. We will investigate and take appropriate action as a matter of priority. Please also visit our Responsible Gaming page for guidance on parental control tools that can be applied at the device or network level.
rt99k is operated internationally, and as a result, your personal data may be transferred to, stored in, or processed in countries outside Indonesia. These countries may not have data protection laws equivalent in scope to those you may be familiar with from other jurisdictions.
Where such international transfers occur, rt99k implements appropriate safeguards to ensure that your personal data receives a level of protection consistent with the standards described in this Privacy Policy. These safeguards include:
If you would like further information about the specific safeguards applied to any particular international transfer of your data, please contact us at support [at] rt99k.net with the subject line "International Transfer Query".
rt99k reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. The version number and effective date displayed at the top of this document indicate the currently operative version.
Where a change is material — meaning it significantly affects your rights or the way we use your personal data — rt99k will provide advance notice via email to your registered address and/or via a prominent notification on the platform, no less than 14 calendar days before the change takes effect. Non-material updates (such as typographical corrections or clarifications that do not alter the substance of the Policy) may be published without prior notice.
Your continued use of the rt99k platform following the effective date of an updated Privacy Policy constitutes your acknowledgment of, and where applicable your consent to, the revised terms. If you do not accept an updated Policy, please cease using the platform and contact support to request account closure.
If you have any questions, concerns, or requests relating to this Privacy Policy or rt99k's personal data processing practices, please contact our Data Protection team through the following channel:
Our support team is available 24 hours a day, 7 days a week, including Indonesian public holidays. Native Indonesian-speaking agents are available on every shift to assist you in your preferred language, even though our platform content is presented in English.
If you are not satisfied with rt99k's response to a data protection complaint, you have the right to lodge a complaint with the relevant supervisory authority in the jurisdiction applicable to you. rt99k will always cooperate fully with any regulatory investigation conducted by a competent authority.
Six core principles that govern the way rt99k handles every piece of personal data entrusted to us by our players.
All data exchanged between your device and rt99k's servers is protected by 256-bit TLS encryption. Sensitive records stored on our infrastructure — including KYC documents and financial data — are encrypted at rest with AES-256. Your data is secure in transit and at rest.
rt99k applies the principle of data minimization: we collect only the personal data that is genuinely necessary for a specific, documented purpose. We do not collect data "just in case". If we no longer need it, we delete it — on schedule and without being asked.
rt99k does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes — under any circumstances. When we share data with service providers, those parties are contractually bound to use it solely to perform the service we have engaged them for.
You hold real, exercisable rights over your personal data — access, rectification, erasure, portability, and objection. Our support team is available 24/7 to process data rights requests. Most requests are acknowledged within 48 hours and fully resolved within 30 days.
Every category of personal data rt99k holds is subject to a documented retention schedule, published in this Privacy Policy. We do not retain data indefinitely. When the applicable retention period expires, data is securely deleted or irreversibly anonymized.
In the unlikely event of a data breach that poses a risk to your rights and freedoms, rt99k will notify affected users promptly and transparently — describing what happened, what data was involved, what we are doing about it, and what steps you can take to protect yourself.
Your data is protected. Your privacy is respected. Now enjoy a world-class online betting experience — sports, live casino, and slots — all transacted in IDR via your preferred Indonesian bank or e-wallet.