Privacy Policy

1. Introduction

Welcome to the depo99 Privacy Policy. This document explains how depo99 (referred to as "we", "us", "our", or the "Company") collects, uses, discloses, stores, and protects the personal information of users (referred to as "you", "your", or the "User") who access and use our online gaming platform located at https://depo99.cam (the "Platform" or "Services").

At depo99, we recognize that privacy is a fundamental right and that the protection of your personal information is essential to maintaining the trust you place in us. We are committed to handling your personal data responsibly, transparently, and in compliance with applicable Indonesian data protection laws and international best practices.

By creating an account, depositing funds, placing bets, or otherwise using our Services, you acknowledge that you have read, understood, and consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with any aspect of this Privacy Policy, you must not use our Services and should refrain from providing any personal information to us.

2. Information We Collect

depo99 collects various types of personal information to provide you with secure, personalized gaming services and to comply with legal and regulatory requirements. The information we collect falls into the following categories:

2.1 Information You Provide Directly

When you register an account, complete identity verification (KYC), or interact with our Services, you provide us with personal information including:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued identification number (KTP number, SIM number, or passport number), and photographs or scans of identification documents.
• Contact Information: Email address, mobile phone number, residential address (street address, city, province, postal code), and preferred communication language.
• Account Credentials: Username, password (stored in encrypted form only — we never store plain-text passwords), security questions and answers, and two-factor authentication settings.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay account details), transaction history, deposit and withdrawal records, and payment method preferences.
• Verification Documents: Copies of government-issued identification (KTP, SIM, passport), proof of address documents (utility bills, bank statements), selfie photographs for identity verification, and any additional documentation requested during enhanced due diligence procedures.

2.2 Information Collected Automatically

When you access and use our Platform, we automatically collect certain technical and usage information through cookies, log files, and other tracking technologies:

• Device Information: Device type (desktop, mobile, tablet), operating system and version, browser type and version, screen resolution, device identifiers (IP address, device ID), and mobile network information.
• Usage Data: Pages visited, features accessed, time spent on each page, clickstream data, search queries, games played, bet history, betting patterns, login times and frequency, and session duration.
• Location Information: IP address-based geolocation data to verify that you are accessing our Services from within Indonesia, as required by our Terms of Service and licensing requirements.
• Communication Records: Customer support chat transcripts, email correspondence, phone call recordings (where permitted by law and with your consent), and feedback submissions.

2.3 Information from Third-Party Sources

We may receive information about you from third-party service providers and partners including:

• Payment Processors: Transaction verification data, payment success/failure notifications, and fraud risk assessments from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay).
• Identity Verification Services: Identity validation results, document authenticity checks, and fraud detection flags from third-party KYC providers.
• Game Providers: Game play data, win/loss records, and gameplay statistics from third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, etc.).

3. How We Use Your Information

depo99 uses your personal information for the following legitimate business purposes:

3.1 Service Provision and Account Management

• Create, maintain, and manage your gaming account
• Process deposits, withdrawals, and other financial transactions
• Verify your identity, age, and residency to ensure compliance with our 21+ age requirement and Indonesian residency restriction
• Enable you to place bets, play games, and access all platform features
• Maintain accurate records of your account activity, transaction history, and betting patterns
• Provide customer support and respond to your inquiries, complaints, or feedback

3.2 Legal and Regulatory Compliance

• Comply with Indonesian laws and regulations governing online gaming, anti-money laundering (AML), and know-your-customer (KYC) requirements
• Prevent, detect, and investigate fraud, money laundering, collusion, bonus abuse, underage gambling, and other prohibited activities
• Cooperate with law enforcement, regulatory authorities, and government agencies when legally required
• Enforce our Terms and Conditions, prevent breaches, and protect our legal rights and interests
• Maintain audit trails and transaction records as required by financial regulations

3.3 Platform Security and Risk Management

• Monitor and analyze account activity to detect suspicious patterns, fraudulent transactions, and security threats
• Implement and maintain security measures including firewalls, intrusion detection systems, and access controls
• Conduct risk assessments and implement fraud prevention measures
• Investigate and respond to security incidents, data breaches, or unauthorized access attempts

3.4 Service Improvement and Personalization

• Analyze user behavior and preferences to improve platform functionality, user interface, and overall user experience
• Develop and test new features, games, and services
• Personalize your gaming experience by recommending games, sports, or promotions based on your preferences and play history
• Conduct internal research, analytics, and statistical analysis to optimize our Services

3.5 Marketing and Communications (With Your Consent)

• Send you promotional offers, bonus announcements, and marketing communications related to depo99 services (only if you have opted in to receive such communications)
• Notify you about important account updates, policy changes, security alerts, and service announcements
• Conduct customer satisfaction surveys and request feedback on our Services

3.6 Responsible Gaming Support

• Monitor your gambling behavior to identify signs of problem gambling
• Implement and enforce responsible gaming tools including deposit limits, loss limits, session time limits, self-exclusion, and cooling-off periods
• Provide access to responsible gaming resources and support services

4. Information Sharing and Disclosure

depo99 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information in the following limited circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) for processing deposits and withdrawals.
• Game Providers: Third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, etc.) that power our casino games, live dealer tables, and slot machines.
• Identity Verification Services: KYC and AML compliance providers that verify your identity, validate documents, and screen for fraud risks.
• Customer Support Tools: Live chat platforms, email service providers, and ticketing systems used to manage customer inquiries.
• Cloud Hosting and Data Storage: Secure cloud infrastructure providers that host our platform and store data with encryption and redundancy.
• Analytics and Monitoring: Website analytics tools (excluding personal identification where possible) and security monitoring services.

All third-party service providers are contractually obligated to protect your information, use it only for the purposes we specify, and comply with applicable data protection laws. We conduct due diligence on all service providers to ensure they meet our security and privacy standards.

4.2 Legal and Regulatory Requirements

We may disclose your personal information when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or other legal processes
• Cooperate with law enforcement agencies, government authorities, or regulatory bodies investigating illegal activities, fraud, or violations of our Terms
• Protect the rights, property, safety, or security of depo99, our users, or the public
• Enforce our Terms and Conditions, Privacy Policy, and other agreements
• Respond to claims that content or activity violates the rights of third parties

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, bankruptcy, or other business transaction involving depo99, your personal information may be transferred to the acquiring entity or successor organization. You will be notified via email and/or prominent notice on our website of any such change in ownership or control, and you will have the opportunity to delete your account before the transfer if you do not consent to the new entity's privacy practices.

4.4 With Your Consent

We may share your information with other parties when you explicitly consent to such sharing, such as when you authorize us to share data with a specific third-party service or participate in a co-branded promotion with a partner company.

5. Cookies and Tracking Technologies

depo99 uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze usage patterns, and improve our Services.

5.1 What Are Cookies?

Cookies are small text files stored on your device (computer, smartphone, tablet) by your web browser when you visit a website. Cookies allow the website to recognize your device on subsequent visits and remember your preferences, login status, and browsing behavior.

5.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of our Platform. These cookies enable core functionality such as account authentication, session management, security features, and access to restricted areas. Without these cookies, our Services cannot function properly. Examples: login session cookies, security tokens, load balancing cookies.
• Performance and Analytics Cookies: Collect information about how visitors use our Platform, such as which pages are most visited, how long users spend on each page, and navigation patterns. This data is aggregated and anonymized where possible. We use this information to improve platform performance and user experience. Examples: Google Analytics cookies (if used), internal analytics tracking.
• Functionality Cookies: Remember your preferences and choices to provide a more personalized experience. Examples: language preference, currency selection, display settings, game favorites.
• Advertising and Marketing Cookies: (Only used if you have consented to marketing communications) Track your browsing activity across websites to deliver targeted advertisements and promotional content relevant to your interests.

5.3 Managing Cookies

Most web browsers automatically accept cookies by default, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Please note that disabling strictly necessary cookies may impair the functionality of our Platform and prevent you from using certain features. To manage cookies, adjust your browser settings (instructions available in your browser's help section) or use browser extensions that control cookie behavior.

6. Data Security

Protecting your personal information is a top priority for depo99. We implement comprehensive technical, administrative, and physical security measures to safeguard your data against unauthorized access, disclosure, alteration, and destruction.

6.1 Technical Security Measures

• Encryption: All data transmitted between your device and our servers is protected using 256-bit SSL/TLS encryption — the same standard used by banks and financial institutions. Sensitive data at rest (stored in databases) is encrypted using industry-standard encryption algorithms.
• Secure Authentication: Passwords are hashed using strong cryptographic algorithms (bcrypt or similar) and never stored in plain text. We offer two-factor authentication (2FA) for enhanced account security.
• Firewalls and Intrusion Detection: Our network infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) that monitor and block malicious traffic.
• Regular Security Audits: We conduct periodic security assessments, vulnerability scans, and penetration testing by independent third-party security firms to identify and remediate potential weaknesses.
• Secure Software Development: Our development team follows secure coding practices, conducts code reviews, and tests for common vulnerabilities (SQL injection, cross-site scripting, CSRF, etc.) before deploying updates.

6.2 Administrative Security Measures

• Access Controls: Access to personal information is restricted to authorized personnel only on a need-to-know basis. Employees undergo background checks and sign confidentiality agreements.
• Security Training: All staff members receive regular training on data protection, privacy best practices, and security awareness to prevent internal threats.
• Incident Response Plan: We maintain a comprehensive incident response plan to quickly detect, contain, and respond to security breaches or data incidents.

6.3 Physical Security Measures

• Data Center Security: Our servers are housed in secure data centers with 24/7 physical security, access controls, video surveillance, and environmental monitoring.
• Backup and Disaster Recovery: We maintain encrypted backups of critical data in geographically distributed locations to ensure business continuity and data recovery in the event of a disaster.

6.4 Your Role in Security

While we implement robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and change it regularly
• Never share your login credentials with anyone
• Enable two-factor authentication (2FA) on your account
• Log out after each session, especially on shared or public devices
• Be cautious of phishing emails or messages claiming to be from depo99 — we will never ask for your password via email or phone
• Report any suspicious activity or unauthorized access to your account immediately

7. Data Retention

depo99 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

7.1 Active Account Data

While your account is active, we retain all personal information, transaction records, betting history, and communication logs to provide ongoing Services, support your account, and comply with regulatory requirements.

7.2 Closed Account Data

When you close your account, we will retain certain information for legal and regulatory compliance purposes, including:

• Identity verification records (KYC documents) for 5 years after account closure, as required by anti-money laundering regulations
• Transaction history and financial records for 7 years, as required by Indonesian financial record-keeping laws
• Records related to disputes, investigations, or legal proceedings for the duration required by law or until the matter is resolved

After the required retention period expires, we will securely delete or anonymize your personal information in accordance with our data retention policies.

7.3 Marketing Communication Data

If you have opted in to receive marketing communications and subsequently unsubscribe, we will retain a record of your email address and opt-out preference to ensure we do not inadvertently contact you again. This record is kept indefinitely to honor your communication preferences.

8. Your Privacy Rights

As a depo99 user, you have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request access to the personal information we hold about you. You can view much of this information directly in your account dashboard (profile details, transaction history, betting records). For additional information not available in your dashboard, contact our customer support team with a data access request.

8.2 Right to Rectification

If you believe any of your personal information is inaccurate, incomplete, or outdated, you have the right to request correction. You can update most information directly in your account settings, or contact customer support for assistance.

8.3 Right to Deletion

You have the right to request deletion of your personal information, subject to certain legal exceptions. We may be required to retain certain data for legal, regulatory, or legitimate business purposes (e.g., fraud prevention, dispute resolution, compliance with financial record-keeping requirements). To request account deletion, contact customer support. Please note that deleting your account will result in permanent loss of access to all Services and any remaining account balance.

8.4 Right to Restrict Processing

You have the right to request restriction of processing of your personal information in certain circumstances, such as when you contest the accuracy of the data or object to processing. During the restriction period, we will store your data but not actively process it except with your consent or for legal claims.

8.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit that data to another service provider. Contact customer support to request a data export.

8.6 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes. You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or adjusting your communication preferences in your account settings.

8.7 Right to Withdraw Consent

Where we rely on your consent to process personal information (e.g., marketing communications, non-essential cookies), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

8.8 Exercising Your Rights

To exercise any of these rights, please contact our customer support team via email, live chat, or in-app messaging with your request and account details. We will respond to your request within 30 days. Identity verification may be required to process requests involving access, correction, or deletion of personal information.

9. Children's Privacy

depo99 strictly prohibits underage gambling. Our Services are intended exclusively for individuals aged 21 years or older. We do not knowingly collect personal information from anyone under the age of 21.

During account registration, we require all users to confirm they meet the minimum age requirement. As part of our KYC verification process, we verify the date of birth on government-issued identification documents to ensure compliance with age restrictions.

If we discover that we have inadvertently collected personal information from an individual under 21 years of age, we will immediately terminate the account, delete all associated personal information, and forfeit any funds in accordance with our Terms and Conditions. If you believe we have collected information from a minor, please contact us immediately at [email protected] (display only — not a clickable link per site policy).

10. International Data Transfers

Your personal information may be transferred to, stored, and processed in countries outside of Indonesia where our servers, service providers, or business partners are located. These countries may have data protection laws that differ from Indonesian laws.

When we transfer personal information internationally, we ensure appropriate safeguards are in place to protect your data, including:

• Contractual agreements with third-party service providers requiring them to implement adequate data protection measures equivalent to those required under Indonesian law
• Use of data centers and cloud infrastructure providers that comply with international security standards (ISO 27001, SOC 2, etc.)
• Encryption of data in transit and at rest during international transfers

By using our Services, you acknowledge and consent to the transfer of your personal information to countries outside Indonesia for the purposes described in this Privacy Policy.

11. Changes to This Privacy Policy

depo99 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will notify you by:

• Sending an email to the address registered on your account
• Displaying a prominent notice on our website homepage
• Sending an in-account notification message

The "Last Updated" date at the top of this Privacy Policy indicates when it was most recently revised. Material changes will take effect 14 days after notification, giving you time to review the updated policy. Your continued use of our Services after the effective date constitutes acceptance of the updated Privacy Policy.

We encourage you to periodically review this Privacy Policy to stay informed about how we protect your information. If you do not agree with any changes, you must cease using our Services and may close your account in accordance with our Terms and Conditions.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us through the following channels:

• Email: [email protected] (display only — not a clickable mailto link per site policy)
• Live Chat: Available 24/7 via the chat icon on our website
• WhatsApp: +62 812 3456 7890 (operating hours 08:00-24:00 WIB daily, display only — not a clickable tel link per site policy)
• In-App Messaging: Access the support ticket system through your account dashboard

Our Indonesian-speaking customer support team is dedicated to addressing your privacy inquiries promptly and professionally. For urgent data security concerns, please use live chat for immediate assistance.