Your personal data belongs to you. This Privacy Policy explains precisely what information idn99 collects from Indonesian players, how we use and protect it, who we share it with, and what rights you hold over your own data. We believe transparency is a core part of earning your trust.
Last updated: January 2026 | Language: English | Market: IndonesiaRegistration details, payment identifiers, device data, and gameplay activity — only what is necessary to run the platform securely.
To verify your identity, process Rupiah transactions, personalise your experience, and keep the platform free from fraud.
Only essential service partners — KYC providers, payment processors, and fraud detection tools — under strict data-sharing agreements.
Access, correct, or request deletion of your data at any time. Contact [email protected] and we will respond within five business days.
1.1 About This Policy. This Privacy Policy ("Policy") describes how idn99 ("idn99", "we", "us", or "our") collects, uses, stores, shares, and protects personal information relating to individuals ("you", "your", or "Member") who visit, register on, or use the idn99 online casino and sportsbook platform accessible at https://idn99.vip (the "Platform").
1.2 Scope. This Policy applies to all personal data collected through the Platform, including data submitted during account registration, data generated during gameplay and betting activity, data collected via cookies and similar tracking technologies, and data provided when you contact our customer support team. This Policy is incorporated by reference into the idn99 Terms and Conditions.
1.3 Your Acceptance. By registering an account on the Platform or by continuing to use the Platform after this Policy has been updated, you confirm that you have read, understood, and agree to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform and should contact [email protected] to close your account.
1.4 Primacy of This Policy. In the event of any conflict between this Privacy Policy and any other idn99 communication regarding the handling of your personal data, this Policy shall prevail unless a more specific data-handling notice is expressly stated to take precedence for a particular processing activity.
2.1 Controller Identity. idn99 acts as the data controller in respect of all personal data collected and processed through the Platform. As data controller, idn99 determines the purposes and means of processing your personal information and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.
2.2 Contact Details. If you have any questions about this Policy or wish to exercise any of your data rights described in Section 10, you may contact idn99's data team using the following details:
2.3 Response Commitment. idn99 will acknowledge all privacy-related inquiries within 24 hours and provide a substantive response within five (5) business days. Complex requests — such as data portability exports or full account deletion — may require up to 30 days to fulfil. We will inform you if a longer timeframe applies.
3.1 Overview. idn99 collects only the personal information that is necessary to operate a secure, compliant, and high-quality gaming and betting platform. The categories of data we collect are described below.
When you create an idn99 account, we collect: your chosen username, your email address, your full legal name as it appears on government-issued identification, your date of birth (to verify that you are 21 years of age or older), and your residential city or province within Indonesia (e.g., Jakarta, Surabaya, Bandung, Bali, Medan, Yogyakarta).
To process deposits and withdrawals in Indonesian Rupiah (IDR), we collect your preferred payment method details. These may include: Indonesian bank account numbers associated with BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, or Bank Permata; or your registered e-wallet identifier linked to OVO, DANA, GoPay, ShopeePay, or LinkAja. idn99 does not store full card numbers or bank PINs. Payment instrument data is tokenised and processed by our payment provider partners under their own security certifications.
For identity verification purposes, we may collect: a copy of your Indonesian National Identity Card (KTP), a valid passport, a selfie photograph for liveness verification, and supporting documents confirming your registered payment method ownership. KYC documents are processed securely and retained only for the period required by applicable compliance obligations.
We automatically collect data about how you interact with the Platform, including: pages and game sections visited, betting and wagering history (game titles, stake amounts, outcomes, timestamps), session durations, deposit and withdrawal transaction logs, bonus claims and wagering progress, and customer support interaction records.
When you access the Platform, we collect standard technical data including: your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, and approximate geographic location derived from your IP address.
If you contact idn99 via email or live chat, we retain records of those communications — including your name, contact details, and the content of your messages — for quality assurance, dispute resolution, and regulatory compliance purposes.
4.1 idn99 uses the personal data we collect for the following purposes:
| Purpose | Data Used | Basis |
|---|---|---|
| Account creation and management | Registration & identity data | Contract performance |
| Age and identity verification (KYC) | KYC documents, date of birth | Legal obligation |
| Processing Rupiah deposits and withdrawals | Financial & payment data | Contract performance |
| Fraud prevention and platform security | Technical, financial, activity data | Legitimate interest |
| Responsible gaming monitoring and tools | Activity data, self-exclusion requests | Legal obligation / legitimate interest |
| Customer support and dispute resolution | Communications data, account history | Contract performance |
| Personalised promotions and bonus offers | Activity data, preferences | Consent / legitimate interest |
| Platform analytics and performance improvement | Usage & technical data (aggregated) | Legitimate interest |
| Legal and regulatory compliance | All data categories as required | Legal obligation |
4.2 Marketing Communications. idn99 may send you promotional emails, platform notifications, or messages about bonuses and seasonal offers — such as those tied to Idul Fitri, Ramadhan, or Indonesian Independence Day — where you have consented to receive such communications or where we have a legitimate interest in informing you about offers directly relevant to your account activity. You may withdraw consent to marketing communications at any time by contacting [email protected]. Withdrawal of marketing consent does not affect your ability to use the Platform or our right to send you service-critical account notifications.
4.3 No Automated Decision-Making. idn99 does not use solely automated decision-making processes that produce legal or similarly significant effects on Members, including automated account closure, except where explicitly required by fraud prevention or responsible gaming obligations. Where automated tools flag an account for review, a human agent will always make the final determination.
5.1 idn99 processes your personal data on the following legal bases:
5.2 Where idn99 relies on legitimate interest as a legal basis, we have conducted a balancing assessment to confirm that our interests do not override your rights and freedoms. Summaries of these assessments are available upon written request to [email protected].
6.1 Principle of Minimum Disclosure. idn99 operates on a minimum-disclosure basis: your personal data is shared with third parties only to the extent strictly necessary for the purposes described in this Policy. We do not sell your personal data to third parties for their own commercial purposes.
6.2 Categories of Recipients. Your personal data may be shared with the following categories of third-party recipients:
6.3 Data Processing Agreements. All third-party service providers who process personal data on idn99's behalf are bound by written data processing agreements that require them to: process data only on idn99's documented instructions; maintain appropriate technical and organisational security measures; not sub-process data without idn99's prior written authorisation; and promptly notify idn99 of any personal data breach affecting idn99 Member data.
7.1 What Are Cookies. Cookies are small text files placed on your device when you visit a website. idn99 uses cookies and similar technologies (including local storage objects and session tokens) to operate the Platform, remember your preferences, maintain your login session, and understand how Members interact with the site.
7.2 Types of Cookies We Use.
7.3 Managing Cookies. You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in or using the cashier. Disabling analytics or marketing cookies will not affect your core Platform experience. Detailed browser-level instructions for managing cookies are available from your browser vendor's help documentation.
7.4 Do Not Track. idn99 respects browser-level "Do Not Track" signals for analytics and marketing cookies. Strictly necessary cookies are deployed regardless of Do Not Track signals, as they are required for basic platform functionality and account security.
8.1 Retention Principles. idn99 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and compliance obligations. When data is no longer needed, it is securely deleted or irreversibly anonymised.
8.2 Retention Periods by Category.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Dispute resolution, compliance |
| KYC / identity documents | 5 years from date of verification | AML / regulatory obligation |
| Financial transaction records | 5 years from transaction date | AML / regulatory obligation |
| Betting & gaming history | 3 years from date of activity | Dispute resolution, responsible gaming |
| Customer support communications | 3 years from date of last interaction | Quality assurance, dispute resolution |
| Marketing preference records | Until withdrawal of consent + 1 year | Consent audit trail |
| Technical / server log data | 90 days (rolling) | Security monitoring |
| Self-exclusion records | Permanent (irrevocable exclusions) | Responsible gaming compliance |
8.3 Account Closure. Upon account closure, idn99 will promptly delete or anonymise all personal data that is not subject to a legal retention obligation. Data subject to a legal retention obligation will be held in restricted access storage and will not be used for any operational purpose during the retention period.
9.1 Technical Measures. idn99 applies industry-standard technical security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:
9.2 Organisational Measures. Access to personal data within idn99 is governed by a strict role-based access control policy. Only employees and contractors with a documented operational need are granted access to Member personal data, and all such access is logged and audited. All idn99 staff who handle personal data receive regular data protection training.
9.3 Data Breach Response. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, idn99 will notify affected Members without undue delay — and within 72 hours where practicable — providing details of the nature of the breach, the categories and approximate volume of data affected, the likely consequences, and the measures taken to address the breach and mitigate its effects.
9.4 Your Role in Security. You are responsible for maintaining the confidentiality of your idn99 username and password. Do not share your login credentials with anyone. If you suspect unauthorised access to your account, contact [email protected] immediately so we can lock the account and investigate.
10.1 As an idn99 Member, you have the following rights in respect of your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request" and specify the right you wish to exercise.
10.2 Verification. To protect the security of your account, idn99 will verify your identity before fulfilling any data rights request. We may ask you to confirm account details or provide a copy of your identity document. We will not fulfil a data rights request from a person who cannot be verified as the data subject.
10.3 Complaints. If you are not satisfied with how idn99 has handled your personal data or responded to a data rights request, you have the right to raise a complaint with the relevant data protection supervisory authority in the jurisdiction in which you are located.
11.1 The idn99 Platform is strictly for adults aged 21 years and older. idn99 does not knowingly collect personal data from individuals under the age of 21. Age verification is performed as part of the account registration process and during KYC checks.
11.2 If idn99 discovers that personal data has been collected from a person under the age of 21 — whether through a false age declaration at registration or any other means — we will immediately suspend the account, void all associated balances and pending bonuses, and permanently delete or securely destroy the personal data associated with the minor's account, to the extent not required to be retained by applicable legal obligations.
11.3 If you are a parent or guardian and believe that a minor in your care has created an account on idn99 without your knowledge, please contact [email protected] immediately. We take the protection of minors with the highest seriousness and will act on any verified report within 24 hours.
12.1 idn99 is an internationally operated platform, and some of our service partners — including game software providers such as Evolution Gaming, Pragmatic Play, NetEnt, and Microgaming — operate infrastructure outside Indonesia. In order to deliver these services, your personal data may be transferred to and processed in countries outside your country of residence.
12.2 Where personal data is transferred internationally, idn99 ensures that appropriate safeguards are in place to protect your information to at least the same standard as required under this Policy. These safeguards may include: contractual clauses that obligate the recipient to protect personal data to equivalent standards; the recipient's certification under a recognised international data protection framework; or the recipient's location in a jurisdiction that has been assessed as providing an adequate level of data protection.
12.3 You may request further information about the specific safeguards applicable to any international transfer of your personal data by contacting [email protected].
13.1 idn99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of the Platform. The "Last updated" date at the top of this page will always reflect the date of the most recent revision.
13.2 Where changes to this Policy are material — meaning they significantly affect how idn99 processes your personal data or your rights as a data subject — idn99 will notify you via your registered email address and display a prominent notice on the Platform for a minimum of 14 days before the changes take effect. For non-material corrections and clarifications, the updated Policy will take effect upon publication.
13.3 Your continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not accept any revision to this Policy, you should contact [email protected] to close your account before the revised Policy takes effect.
For all privacy-related inquiries, data rights requests, or complaints, please contact the idn99 team using the details below. Our Indonesian-speaking support agents are available around the clock, seven days a week, across all Indonesian time zones (WIB UTC+7, WITA UTC+8, WIT UTC+9).
We are committed to resolving all privacy concerns promptly and transparently. If you feel your inquiry has not been adequately addressed, you retain the right to escalate your complaint to the relevant supervisory authority in your jurisdiction at any time.
We built our data practices around six core commitments — because your trust is the foundation everything else rests on.
Every byte of data transmitted between your device and our servers is protected by industry-leading 256-bit SSL/TLS encryption — the same standard used by global banks.
idn99 does not sell, rent, or trade your personal information to third-party advertisers or data brokers — ever. Your data is used only to run your account and improve your experience.
Your BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and ShopeePay payment details are tokenised immediately upon receipt. Raw account numbers are never stored on idn99 servers.
Identity verification is a one-time process. Your KTP or passport data is processed by certified KYC providers and retained only as long as compliance obligations require.
We collect the minimum data necessary to deliver each service. If a piece of information is not needed to run your account securely, we do not ask for it and do not hold it.
Data access, correction, and deletion requests are acknowledged within 24 hours and resolved within five business days — no bureaucratic delays, no runaround.
Now that you know exactly how idn99 protects your personal data, explore our full range of games and sports betting markets — backed by the security commitments in this Policy.