Privacy Policy

The following definitions apply throughout this Privacy Policy:

This Privacy Policy applies to all Personal Data collected by ron99 in connection with your use of the Platform at ron99.cam, including all sub-pages, account management features, customer support interactions, and promotional communications. It applies to all Members and visitors regardless of the device or browser used to access the Platform.

This Policy should be read alongside ron99's Terms & Conditions, which govern the contractual relationship between you and ron99. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a data protection matter, this Privacy Policy takes precedence.

This Policy does not cover the privacy practices of third-party websites or services that may be referenced or accessible from the Platform. Ron99 does not control and is not responsible for the data practices of any third party. We encourage you to review the privacy policies of any third-party service before providing them with your personal information.

Ron99 collects only the data that is necessary for the specific purposes described in Section 5 of this Policy. The categories of Personal Data we collect are set out below:

Identity and Contact Data

• Full legal name
• Date of birth
• Gender (where provided)
• Residential address (street, city, province, postal code)
• Email address
• Mobile phone number
• National Identity Card number (KTP — Kartu Tanda Penduduk) or passport number, collected during KYC

Financial and Transaction Data

• Bank account details (bank name, account number, account holder name) for deposit and withdrawal processing via BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, and BSI
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Deposit and withdrawal transaction history, including amounts in Indonesian Rupiah (IDR / Rp), timestamps, and transaction status
• Account balance information

Gaming and Betting Activity Data

• Wager history, including markets selected, stake amounts, odds, and settlement outcomes
• Casino game sessions, including game titles, session duration, stakes, and results
• Bonus credits claimed and wagering progress
• Responsible gaming tool settings (deposit limits, self-exclusion status, session timers)

Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Session identifiers and access timestamps
• Cookie identifiers and similar tracking data (see Section 10)

Communication Data

• Records of customer support interactions, including live chat transcripts and email correspondence
• Survey responses and feedback submissions where provided voluntarily

Ron99 collects Personal Data through the following channels:

• Direct provision by you: Information you provide when registering an Account, completing the KYC verification process, submitting a deposit or withdrawal request, contacting our support team, or participating in a survey or promotion.
• Automated technical collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser session data, and Cookie-based tracking information. This collection occurs whether or not you are logged into your Account.
• Third-party sources: Identity verification data returned by our KYC processing partners following document submission. Payment confirmation data from our banking and e-wallet integration partners. Fraud intelligence signals from our anti-money-laundering compliance services where required by our licence conditions.
• Platform activity: Betting and gaming activity data generated naturally as a result of your use of the Platform's products and services.

Ron99 processes your Personal Data for the following specific, documented purposes:

Ron99 does not process your Personal Data for any purpose beyond those listed above without first obtaining your explicit consent or as otherwise required by applicable law.

Ron99 processes Personal Data on the following legal bases, which collectively cover all processing activities described in this Policy:

• Contractual necessity: Processing required to perform the contract between you and ron99 — including account registration, payment processing, and service delivery — is carried out on the basis of contractual necessity. Without this processing, ron99 cannot provide its services to you.
• Legal obligation: Processing required to comply with ron99's licensing obligations, anti-money-laundering regulations, age verification requirements, and other applicable regulatory demands is carried out on the basis of legal obligation.
• Legitimate interests: Processing for platform security, fraud prevention, responsible gaming monitoring, and improvement of the Platform is carried out on the basis of ron99's legitimate interests, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional promotional communications is carried out on the basis of your explicit consent. You may withdraw this consent at any time by contacting [email protected] or updating your communication preferences in your Account dashboard. Withdrawal of consent does not affect the lawfulness of any processing carried out before withdrawal.

Ron99 does not sell, rent, or otherwise commercially transfer your Personal Data to any third party. Data may be shared only in the following strictly defined circumstances:

• Service providers and processors: Ron99 shares data with carefully selected third-party service providers who process data on our behalf and under our instructions, including: KYC and identity verification providers, payment processing partners (for IDR transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other supported methods), cloud infrastructure and hosting providers, fraud detection and anti-money-laundering compliance services, and customer support platform providers. All processors are bound by written data processing agreements that require them to implement appropriate security measures and to process data only as directed by ron99.
• Game providers: Certain game session data (stake amounts, game outcomes, session duration) is shared with our certified game studio partners — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft — to the extent necessary for game delivery and dispute resolution. These providers operate under their own licences and compliance frameworks.
• Regulatory and legal authorities: Ron99 may disclose Personal Data to its licensing authority, to financial intelligence units, or to law enforcement agencies where required by law, by court order, or by the conditions of our gaming licence. We will notify you of any such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of ron99's business, Personal Data held by ron99 may be transferred to the acquiring entity. You will be notified in advance of any such transfer and given the opportunity to close your Account if you do not wish your data to be transferred.

Ron99 operates as an internationally licensed platform and may process or store your Personal Data outside of Indonesia, including in the jurisdiction in which our licensing authority is located and in the countries where our cloud infrastructure partners operate their data centres.

Where Personal Data is transferred internationally, ron99 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections provided within the jurisdiction of our licensing authority. These safeguards may include: standard contractual clauses incorporated into agreements with data processors, transfers to jurisdictions that have received an adequacy determination from a recognised data protection authority, or other legally recognised transfer mechanisms.

You acknowledge that by using the Platform and providing your Personal Data, you consent to the international transfer of your data under the safeguards described above.

Ron99 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply as a general guide:

At the end of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Where data must be retained for regulatory purposes beyond the point at which it is operationally needed, it is segregated from active data systems and access-restricted.

Ron99 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, ensure security, and understand how the Platform is used. The following categories of cookies are deployed:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled without breaking core Platform functionality.
• Functional cookies: Store your preferences such as language settings, preferred payment method display, and responsible gaming tool states. Disabling these will not prevent Platform use but may affect user experience.
• Analytics cookies: Used by ron99's internal analytics to understand aggregate usage patterns, identify pages with technical errors, and improve the Platform. Data collected through analytics cookies is processed in anonymised or pseudonymised form and is not used for individual profiling.
• Security cookies: Assist in detecting and preventing fraudulent account access and unusual session activity. These cookies are strictly necessary for the protection of your Account.

Ron99 does not deploy third-party advertising cookies or tracking pixels that would allow your activity on the Platform to be monitored by external advertising networks. Most web browsers allow you to control cookies through browser settings. Restricting strictly necessary cookies may impair the functionality of the Platform.

Ron99 implements a layered security architecture to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• Encryption in transit: All data transmitted between your device and ron99's servers is encrypted using TLS 1.3 (256-bit). Our SSL certificate is maintained and renewed on a continuous basis.
• Encryption at rest: Sensitive Personal Data — including KYC documents and financial account details — is stored in encrypted form on our infrastructure.
• Access controls: Access to Personal Data within ron99's operations is restricted on a strict need-to-know basis. Staff with access to Member data are subject to confidentiality obligations and background screening.
• Two-factor authentication (2FA): Available to all Members for their Account login. Ron99 strongly recommends enabling 2FA. All internal administrative accounts require 2FA by policy.
• Continuous monitoring: Ron99 operates automated monitoring for unusual access patterns, failed authentication attempts, and data exfiltration indicators, with an on-call security team responding to alerts.
• Penetration testing: The Platform is subject to periodic third-party security assessments. Findings are remediated under a documented patch management process.

While ron99 maintains robust security measures, no online system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ron99 will notify you promptly via your registered email address, providing details of the nature of the breach, the data affected, and the steps we have taken in response.

As a Member of ron99, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact our support team at [email protected]. Ron99 will respond to all rights requests within 30 calendar days.

Ron99 strictly prohibits access by any person under the age of 21. The Platform is designed, marketed, and operated exclusively for adults. Ron99 does not knowingly collect Personal Data from individuals under the age of 21.

If ron99 becomes aware that it has inadvertently collected Personal Data from a person under 21, that data will be deleted immediately, the associated Account will be closed, and any deposited funds will be returned to the originating payment method. If you believe that a minor has registered on the Platform or provided their data to ron99, please notify us immediately at [email protected].

The ron99 Platform does not include links to external third-party websites as a matter of policy. However, our game providers and payment integration partners operate their own platforms and systems that have their own privacy practices. Ron99 is not responsible for the privacy practices of these third parties and cannot control how they handle data within their own systems.

Our game studio partners — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft — and our payment partners — including the operators of BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja integrations — each operate under their own licensed frameworks and privacy policies. We encourage you to review those policies if you have questions about how your data is handled within those systems.

Ron99 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or licensing requirements. Where amendments are material — that is, where they meaningfully affect how we process your Personal Data — ron99 will notify you via your registered email address at least 14 days before the changes take effect.

For minor clarificatory amendments that do not affect the substance of our data practices, we will update the "Last Updated" date at the top of this page without individual notification. It is your responsibility to review this Policy periodically. Continued use of the Platform after an amended Policy has taken effect constitutes your acceptance of those changes.

For any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact the ron99 data team using the details below. We are committed to resolving all privacy inquiries promptly and transparently.

If you are not satisfied with ron99's response to a privacy complaint, you may refer the matter to our licensing authority's designated complaints and disputes function. Contact details for the licensing authority are available upon request from our support team.