Privacy Policy — pw99 Data Security

1. Introduction

pw99 ("we," "us," or "our") operates an online gaming platform serving players across Indonesia. We recognize that the personal information you share with us is sensitive and deserves the highest level of protection. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of your personal data when you register for and use pw99 services.

By creating an account on pw99, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree with any aspect of this policy, you should not use our platform.

2. Information We Collect

2.1 Personal Identification Information

When you register an account with pw99, we collect personal information necessary to verify your identity, comply with legal obligations, and provide gaming services. This information includes:

• Full Legal Name: As it appears on your government-issued identity document (Indonesian KTP or passport).
• Date of Birth: To verify that you meet the minimum age requirement (21 years or older).
• Residential Address: Your current address in Indonesia, including city, province, and postal code.
• Email Address: Used for account communications, password resets, and important notifications.
• Mobile Phone Number: For account security, two-factor authentication, and customer support contact.
• Government-Issued ID: Copies of your KTP or passport submitted during Know Your Customer (KYC) verification.
• Proof of Address: Utility bills, bank statements, or government correspondence confirming your residential address.
• Selfie Verification Photo: A photograph of you holding your identity document and a handwritten note as part of our liveness verification process.

2.2 Financial Information

To process deposits and withdrawals, we collect financial information including:

• Bank account details (bank name, account number, account holder name) for Indonesian banks such as BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and Bank Danamon.
• E-wallet account information for OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Transaction history including deposit amounts, withdrawal requests, and payment timestamps.

We do not store complete credit or debit card numbers. All financial transactions are processed through secure, encrypted channels. Third-party payment processors may collect additional information as required by their own compliance procedures.

2.3 Gaming and Behavioral Data

We automatically collect information about your use of pw99 to improve service quality, detect fraud, and fulfill regulatory obligations:

• Gaming activity including bets placed, games played, wagering patterns, win/loss records, and bonus usage.
• Login timestamps, session duration, and frequency of platform access.
• Device information including IP address, browser type, operating system, screen resolution, and device identifiers.
• Geolocation data (derived from IP address) to confirm you are accessing pw99 from within Indonesia.
• Customer support interactions including live chat transcripts, email correspondence, and support ticket history.

2.4 Cookies and Tracking Technologies

pw99 uses cookies and similar tracking technologies to enhance user experience and platform functionality. Cookies are small text files stored on your device that help us remember your preferences, maintain login sessions, and analyze site traffic. The types of cookies we use include:

• Essential Cookies: Required for basic platform functionality such as maintaining login sessions and processing transactions.
• Performance Cookies: Collect anonymous data about how users interact with pw99 to help us optimize performance and identify technical issues.
• Functional Cookies: Remember your preferences such as language settings and display preferences.

You can configure your browser to refuse cookies, but this may limit your ability to use certain features of pw99. Most browsers provide instructions on managing cookie settings in their help documentation.

3. How We Use Your Information

pw99 uses the personal information we collect for the following purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your player account.
• Verifying your identity and age to ensure compliance with our 21+ policy.
• Processing deposits, managing your balance, and executing withdrawal requests.
• Providing customer support and responding to your inquiries.
• Delivering promotional offers, bonuses, and loyalty rewards (where you have opted in).

3.2 Legal and Regulatory Compliance

• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations.
• Fulfilling reporting obligations to gaming regulators and financial authorities.
• Detecting and preventing fraud, money laundering, and other illegal activities.
• Responding to legal requests from law enforcement or judicial authorities.
• Enforcing our Terms and Conditions and investigating violations.

3.3 Platform Security and Fraud Prevention

• Monitoring for suspicious account activity, collusion, and bonus abuse.
• Protecting against unauthorized access, hacking attempts, and cyber threats.
• Identifying patterns consistent with problem gambling and offering responsible gaming interventions.

3.4 Service Improvement and Analytics

• Analyzing user behavior to improve game selection, platform design, and user experience.
• Conducting A/B testing to optimize promotional campaigns and site features.
• Generating aggregate, anonymized reports on platform usage and performance metrics.

3.5 Marketing and Communications (Opt-In Only)

If you have provided explicit consent, we may use your email address and mobile number to send promotional communications about new games, special bonuses, VIP program benefits, and platform updates. You may withdraw consent at any time by clicking the unsubscribe link in any promotional email or contacting customer support.

4. How We Share Your Information

pw99 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We only share your data in the following limited circumstances:

4.1 Service Providers and Business Partners

We work with trusted third-party service providers who assist with platform operations. These providers may have access to your personal information only to the extent necessary to perform their functions and are contractually obligated to maintain confidentiality. Such providers include:

• Payment processors facilitating deposits and withdrawals via Indonesian banks and e-wallets.
• Identity verification services performing KYC and AML checks.
• Cloud hosting providers storing encrypted user data on secure servers.
• Customer support software providers managing live chat and ticketing systems.
• Game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe) delivering casino and live dealer content.

4.2 Legal and Regulatory Obligations

We may disclose your personal information if required by law or in response to valid legal process, including:

• Court orders, subpoenas, or search warrants issued by competent authorities.
• Requests from gaming regulators or financial intelligence units investigating potential violations.
• Legal obligations to report suspicious transactions under AML legislation.
• Situations where disclosure is necessary to protect the safety or legal rights of pw99, our users, or the public.

4.3 Business Transfers

In the event that pw99 undergoes a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified of any such change in ownership and provided an opportunity to opt out if the new entity's privacy practices differ materially from this policy.

5. Data Security Measures

pw99 employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• 256-Bit SSL Encryption: All data transmitted between your device and pw99 servers is encrypted using Transport Layer Security (TLS) protocols.
• Secure Data Storage: Personal information is stored on encrypted servers with restricted access controls and regular security audits.
• Password Protection: User passwords are hashed using strong cryptographic algorithms (bcrypt or Argon2) and are never stored in plain text.
• Two-Factor Authentication (2FA): Optional 2FA is available to all users for enhanced account security.
• Regular Security Audits: Our systems undergo periodic penetration testing and vulnerability assessments by independent security firms.
• Employee Training: pw99 staff with access to personal information receive regular training on data protection best practices and confidentiality obligations.

6. Data Retention

pw99 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specific retention periods include:

• Active Accounts: Personal and financial data is retained for the duration of your active account and for a minimum of 7 years after account closure to comply with financial record-keeping regulations.
• Transaction Records: All deposit, withdrawal, and betting records are retained for at least 7 years for audit, tax, and AML compliance purposes.
• KYC Documents: Copies of identity documents and verification photos are retained for 7 years following account closure.
• Marketing Communications: If you opt out of marketing communications, your contact preferences are retained indefinitely to ensure we do not inadvertently contact you again.
• Self-Excluded Accounts: Records of self-excluded players are retained permanently to prevent circumvention of exclusion measures.

After the applicable retention period expires, personal information is securely deleted or anonymized so that it can no longer be associated with an individual.

7. Your Rights and Choices

As a pw99 user, you have the following rights regarding your personal information:

7.1 Right to Access

You may request a copy of the personal information we hold about you. To submit an access request, contact our customer support team at support at pw99 dot cam. We will respond within 30 days of receiving a valid request.

7.2 Right to Correction

If any of your personal information is inaccurate or incomplete, you may update it through your account settings or by contacting customer support. We will verify your identity before processing correction requests.

7.3 Right to Deletion

You may request deletion of your personal information by closing your pw99 account. Note that we are legally required to retain certain information (transaction records, KYC documents) for regulatory purposes even after account closure. Such information will be securely archived and deleted after the mandatory retention period expires.

7.4 Right to Restrict Processing

You may request that we restrict processing of your personal information in certain circumstances, such as when you contest the accuracy of your data or while we investigate a complaint. During the restriction period, your account may have limited functionality.

7.5 Right to Object to Marketing

You may opt out of receiving promotional communications at any time by clicking the unsubscribe link in marketing emails, adjusting your communication preferences in your account settings, or contacting customer support. Opting out of marketing does not affect transactional communications (withdrawal confirmations, security alerts, etc.).

7.6 Right to Data Portability

Upon request, we will provide your personal data in a structured, commonly used, and machine-readable format to facilitate transfer to another service provider.

8. International Data Transfers

pw99 operates internationally and may transfer your personal information to servers located outside Indonesia for processing and storage. When we transfer data across borders, we ensure that appropriate safeguards are in place, including:

• Transferring data only to jurisdictions recognized as providing adequate data protection.
• Using standard contractual clauses approved by data protection authorities.
• Ensuring that third-party processors comply with international data protection standards.

By using pw99, you consent to the international transfer of your personal information as described in this policy.

9. Children's Privacy

pw99 is intended exclusively for adults aged 21 and older. We do not knowingly collect personal information from individuals under 21 years of age. If we become aware that we have inadvertently collected information from a minor, we will immediately delete that information and permanently ban the associated account. Parents or guardians who believe their child has provided personal information to pw99 should contact us immediately at support at pw99 dot cam.

10. Changes to This Privacy Policy

pw99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by email (if you have provided a valid email address) and display a prominent notice on the platform. The "Last Updated" date at the top of this document indicates the most recent revision. Your continued use of pw99 after changes are posted constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Team:

• Email: support at pw99 dot cam (Subject: Privacy Inquiry)
• Live Chat: Available 24/7 through the pw99 platform
• WhatsApp: Contact details available via live chat

Our Indonesian-speaking support team is available around the clock to assist with privacy-related inquiries. We aim to respond to all privacy requests within 30 days.