Last Updated: January 1, 2026 | Effective Date: January 1, 2026

Your Privacy Matters: rf99 is committed to protecting the privacy and security of your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information. By using the rf99 platform, you consent to the practices described in this policy.

1. Introduction

Welcome to the rf99 Privacy Policy. This document outlines how rf99 ("we," "us," "our") collects, uses, stores, and protects personal information from users ("you," "your") of the rf99 online gaming platform accessible at https://rf99.cam. We are committed to maintaining the highest standards of data protection and transparency in accordance with applicable data protection laws and international best practices.

This Privacy Policy applies to all users of the rf99 platform, including registered members and visitors. By accessing or using our services, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with any aspect of this policy, you should not use our services.

rf99 operates primarily in the Indonesian market, serving English-preference Indonesian players who seek world-class casino games, live dealer experiences, sports betting including bandar bola (football betting on BRI Liga 1, EPL, and international leagues), togel (traditional Indonesian lottery), and slot gacor (high-RTP slot games). Our privacy practices are designed to protect Indonesian users while complying with local data protection requirements and international standards.

2. Information We Collect

To provide you with a secure and personalized gaming experience, rf99 collects various types of personal information through different channels. The information we collect falls into the following categories:

2.1 Account Registration Information

When you create an account on the rf99 platform, we collect:

  • Personal Identification Data: Full legal name, date of birth, gender, Indonesian national identity card (KTP) number
  • Contact Information: Email address, Indonesian mobile phone number, residential address (city, province, postal code)
  • Login Credentials: Username, encrypted password (we never store passwords in plain text)
  • Account Preferences: Language preference, communication preferences, time zone (WIB/WITA/WIT)

2.2 Know Your Customer (KYC) Verification Documents

To comply with anti-money laundering (AML) regulations and age verification requirements, we collect:

  • Clear copy of your Indonesian national identity card (KTP) showing photograph, full name, date of birth, address, and KTP number
  • Proof of residential address (utility bill, bank statement, or government-issued document dated within the last three months)
  • Selfie photograph of you holding your KTP next to your face for identity verification
  • Additional documentation if required for enhanced due diligence (source of funds documentation, proof of income)

2.3 Financial and Transaction Information

We collect data related to your financial transactions on the platform:

  • Payment Method Details: Indonesian bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet IDs (OVO, DANA, GoPay, ShopeePay, LinkAja)
  • Transaction History: Deposit amounts, withdrawal amounts, transaction dates and times, payment method used, transaction status
  • Bonus and Promotion Data: Bonuses claimed, wagering progress, bonus terms acceptance timestamps

Note: We do not store full credit card numbers or sensitive payment card data. Payment processing is handled by secure third-party payment processors who are PCI DSS compliant.

2.4 Gameplay and Betting Information

To provide game services and ensure fair play, we collect:

  • Bet amounts, game types played, win/loss records, game session duration
  • Sports betting selections (football matches, odds chosen, bet types like Asian handicap, mix parlay)
  • Gameplay patterns and statistics for responsible gaming monitoring
  • RTP (Return to Player) data, volatility preferences, favorite games

2.5 Technical and Device Information

When you access the rf99 platform, we automatically collect:

  • Device Data: Device type (desktop, mobile, tablet), operating system (Windows, macOS, Android, iOS), browser type and version
  • Network Information: IP address, Internet Service Provider (Telkomsel, Indosat, XL Axiata, etc.), geographic location (city-level, not precise GPS)
  • Usage Data: Pages visited, time spent on pages, referral sources, click patterns, navigation paths
  • Cookies and Tracking Technologies: Session cookies, preference cookies, analytics cookies (see Section 8 for details)

2.6 Communications and Support Interactions

When you contact our customer support team, we collect:

  • Email correspondence, live chat transcripts, WhatsApp messages
  • Support ticket details, complaint descriptions, resolution notes
  • Feedback, survey responses, user experience comments

3. How We Use Your Personal Information

rf99 uses the personal information we collect for the following legitimate purposes:

3.1 Account Management and Service Delivery

  • Creating and managing your user account
  • Processing deposits and withdrawals to Indonesian bank accounts and e-wallets
  • Providing access to casino games, live dealer tables, sports betting markets, togel, and slot gacor
  • Calculating and crediting winnings, applying bonuses and promotions
  • Maintaining accurate account balances and transaction records

3.2 Legal Compliance and Security

  • Verifying your identity and age (21+ requirement) through KYC procedures
  • Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations
  • Preventing fraud, account takeover, bonus abuse, and unauthorized access
  • Detecting and investigating suspicious activity, collusion, cheating, or terms violations
  • Responding to legal requests, court orders, and regulatory inquiries

3.3 Customer Support and Communication

  • Responding to your inquiries via live chat, email, and WhatsApp in English and Indonesian
  • Sending transactional notifications (deposit confirmations, withdrawal updates, bonus activations)
  • Providing account security alerts (unusual login attempts, password changes)
  • Delivering important service announcements and policy updates

3.4 Responsible Gaming Protection

  • Monitoring gameplay patterns to identify potential problem gambling behavior
  • Implementing deposit limits, loss limits, and session time limits as requested by users
  • Processing self-exclusion requests and time-out periods
  • Providing access to responsible gaming tools and support resources

3.5 Marketing and Personalization (With Your Consent)

  • Sending promotional offers, bonus announcements, and VIP rewards (only if you opt in)
  • Personalizing game recommendations based on your play history
  • Offering tailored bonuses for Indonesian holidays (Independence Day, Idul Fitri, Chinese New Year)
  • Inviting participation in tournaments, jackpot promotions, and VIP events

Important: You can opt out of marketing communications at any time by clicking the unsubscribe link in emails or adjusting your communication preferences in your account settings. Opting out of marketing does not affect transactional communications (deposit/withdrawal confirmations, security alerts).

3.6 Platform Improvement and Analytics

  • Analyzing user behavior to improve platform functionality and user experience
  • Testing new features, game integrations, and payment methods
  • Optimizing website performance, page load speeds, and mobile responsiveness
  • Conducting statistical analysis and generating aggregated reports (no individual identification)

4. How We Share Your Information

rf99 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with trusted third parties in the following limited circumstances:

4.1 Payment Processors

We share necessary financial information with Indonesian payment service providers (bank transfer gateways, e-wallet APIs) to process deposits and withdrawals. These processors are contractually obligated to handle your data securely and use it only for transaction processing purposes.

4.2 Game Providers

When you play games on the rf99 platform, certain gameplay data (bet amounts, game outcomes, session IDs) is shared with our licensed game providers to deliver the gaming experience. Game providers are bound by data protection agreements and cannot use your data for any purpose other than game delivery.

4.3 Identity Verification Services

We use third-party KYC verification services to authenticate your Indonesian national identity card (KTP) and proof of address documents. These services compare your submitted documents against government databases to verify authenticity and detect fraud.

4.4 Customer Support Tools

Our customer support team uses secure CRM (Customer Relationship Management) and live chat platforms to manage support tickets and communications. These tools store conversation history to provide better service and maintain quality standards.

4.5 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, regulatory bodies, or courts when required by law, court order, subpoena, or legal process. This includes cooperation with Indonesian authorities investigating money laundering, fraud, or other illegal activities.

4.6 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. You will be notified via email and prominent notice on the rf99 platform of any such change in ownership or control.

Data Protection Guarantee: All third parties with whom we share your data are contractually required to maintain the same level of data protection and security as rf99. We conduct due diligence on all service providers to ensure they meet our privacy and security standards.

5. Data Security Measures

rf99 implements industry-standard technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Technical Security

  • Encryption: All data transmission is protected by 256-bit SSL/TLS encryption (HTTPS). Passwords are hashed using bcrypt with salt before storage.
  • Secure Servers: All personal data is stored on secure servers located in data centers with 24/7 monitoring, fire suppression, and redundant power systems.
  • Access Controls: Strict role-based access controls (RBAC) limit employee access to personal data. Only authorized personnel with legitimate business need can access your information.
  • Firewall Protection: Multi-layered firewall systems protect our infrastructure from external threats and intrusion attempts.
  • Regular Security Audits: We conduct quarterly penetration testing and annual security audits by independent third-party cybersecurity firms.

5.2 Organizational Security

  • All rf99 employees and contractors sign confidentiality agreements and undergo data protection training
  • Clear data breach response procedures with incident notification protocols
  • Segregation of player funds from operational funds in separate bank accounts
  • Regular backup procedures with encrypted off-site storage for disaster recovery

5.3 User Security Best Practices

While we implement robust security measures, you also play a crucial role in protecting your account:

  • Choose a strong, unique password that is not used for other online services
  • Never share your login credentials with anyone, including family or friends
  • Log out after each session, especially on shared or public devices
  • Enable two-factor authentication (2FA) if available in your account settings
  • Be cautious of phishing emails pretending to be from rf99 — always verify the sender address
  • Contact support immediately if you notice any suspicious account activity

Security Notice: Despite our best efforts, no system is 100% secure. If we become aware of a data breach affecting your personal information, we will notify you via email within 72 hours and provide guidance on protective measures you should take.

6. Data Retention Period

rf99 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal and regulatory obligations:

Data Type Retention Period Reason
Account Registration Data Duration of account + 5 years after closure Legal compliance, dispute resolution
KYC Verification Documents 5 years after last transaction AML/CTF regulatory requirements
Transaction Records 7 years after transaction date Tax compliance, audit requirements
Gameplay History 3 years after last login Dispute resolution, fraud prevention
Support Communications 2 years after last contact Quality assurance, complaint resolution
Marketing Consent Until consent withdrawn + 30 days Preference management
Cookies and Analytics 13 months from placement Industry standard for analytics cookies

After the retention period expires, personal data is securely deleted or anonymized so that it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical analysis and research purposes.

7. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request a copy of all personal information rf99 holds about you. To request your data, contact our support team with your account details. We will provide a comprehensive report within 30 days in a commonly used electronic format (PDF or CSV).

7.2 Right to Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. Most account details can be updated directly in your account settings. For KYC document updates, contact support with updated documentation.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information under certain circumstances. However, this right is not absolute — we must retain certain data for legal and regulatory compliance (AML records, transaction history for tax purposes). Upon account closure, we will delete or anonymize data to the maximum extent permitted by law.

7.4 Right to Restrict Processing

You can request that we limit how we use your personal information in certain situations, such as when you contest the accuracy of your data or object to our processing. During the restriction period, we will store your data but not actively process it except with your consent or for legal claims.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (JSON or CSV) and to transmit that data to another service provider where technically feasible.

7.6 Right to Object

You can object to processing of your personal information for direct marketing purposes at any time. Simply click the unsubscribe link in marketing emails or adjust your communication preferences in account settings. You may also object to processing based on legitimate interests — we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

7.7 Right to Withdraw Consent

Where we process your personal information based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before consent was withdrawn.

7.8 How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Officer at:

  • Email: [email protected] (Subject line: "Privacy Rights Request")
  • Response Time: We will respond to all requests within 30 days
  • Verification: For security, we may request additional identification before processing your request

8. Cookies and Tracking Technologies

rf99 uses cookies and similar tracking technologies to enhance your user experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device by your web browser.

8.1 Types of Cookies We Use

  • Essential Cookies: Required for platform functionality (login sessions, account authentication, shopping cart for bonus selection). These cannot be disabled.
  • Performance Cookies: Collect anonymous data on how you use the platform (pages visited, time spent, errors encountered) to improve our services.
  • Functional Cookies: Remember your preferences (language selection, currency display, game favorites) to provide a personalized experience.
  • Targeting/Marketing Cookies: Track your browsing behavior to deliver relevant promotional content. These are only used with your consent.

8.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block all cookies, accept only first-party cookies, or delete existing cookies. Please note that blocking essential cookies may prevent you from accessing certain platform features. Consult your browser's help documentation for cookie management instructions.

8.3 Third-Party Analytics

We use third-party analytics tools (such as Google Analytics) to understand user behavior and improve our platform. These tools use cookies to collect anonymous usage data. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

9. International Data Transfers

While rf99 primarily serves Indonesian players, some of our service providers (game studios, payment processors, cloud infrastructure) may be located outside Indonesia. When we transfer your personal data internationally, we ensure adequate protection through:

  • Data Processing Agreements with Standard Contractual Clauses (SCCs) approved by international data protection authorities
  • Selection of service providers certified under recognized data protection frameworks
  • Encryption of all data in transit and at rest
  • Regular audits of third-party data handling practices

10. Children's Privacy

rf99 is strictly for adults aged 21 years and older. We do not knowingly collect personal information from individuals under the age of 21. If we discover that we have inadvertently collected information from a minor, we will immediately delete that information and terminate the associated account. Parents or guardians who believe their child has provided personal information to rf99 should contact us immediately at [email protected].

11. Changes to This Privacy Policy

rf99 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this policy
  • Notify registered users via email to their registered email address
  • Display a prominent notice on the rf99 homepage for 30 days
  • Request renewed consent where required by law

Your continued use of the rf99 platform after policy changes take effect constitutes your acceptance of the updated terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Information

If you have any questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact us:

  • Email: [email protected]
  • Subject Line: "Privacy Policy Inquiry"
  • Live Chat: Available 24/7 on the rf99 platform (English and Indonesian support)
  • Response Time: We aim to respond to all privacy inquiries within 48 hours

If you believe rf99 has not adequately addressed your privacy concerns, you have the right to lodge a complaint with the relevant Indonesian data protection authority or supervisory body in your jurisdiction.

Our Privacy Commitments to You

At rf99, we understand that your trust is earned through action, not just words. Here are our core privacy commitments:

Data Encryption

All personal data is encrypted using 256-bit SSL during transmission and AES-256 at rest. Your information is never stored in plain text.

No Data Selling

We never sell, rent, or trade your personal information to third parties for marketing purposes. Your data belongs to you.

Full Transparency

We clearly explain what data we collect, why we collect it, and how we use it. No hidden data practices or fine print surprises.

Your Control

You have full control over your personal data. Access, correct, delete, or export your information at any time through your account settings.

Breach Notification

If a data breach affects your information, we will notify you within 72 hours with full details and recommended protective actions.

Minimal Retention

We retain your data only as long as necessary for service delivery and legal compliance, then securely delete or anonymize it.

Questions About Your Privacy?

Our support team is here to explain our privacy practices and help you exercise your data rights