Privacy Policy
for luck99

In this Privacy Policy, the following terms carry the meanings set out below:

• "luck99," "we," "us," "our" — the operating entity behind the luck99 online gaming platform at https://luck99.cam.
• "Platform" — the luck99 website, mobile-optimized pages, and associated digital services.
• "User," "Player," "you," "your" — any natural person who registers an Account and uses any service on the Platform.
• "Personal Data" — any information that directly or indirectly identifies a natural person, including name, contact details, financial data, device identifiers, and behavioral data.
• "Processing" — any operation or set of operations performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Controller" — luck99, acting as the entity that determines the purposes and means of processing Personal Data.
• "Third Party" — any entity other than you and luck99, including service providers, payment processors, and game studios.
• "Cookies" — small data files placed on your device by the Platform to store information about your session and preferences.

luck99 collects several categories of Personal Data in the course of providing its gaming services. The categories below outline what we collect and why each category is necessary:

We do not collect or store full payment card numbers directly on our servers. All car d and e-wallet transactions are processed through secure third-party payment gateways that maintain PCI-DSS compliance independently of our infrastructure.

Personal Data is collected through the following mechanisms:

Direct Collection

You provide data directly to us when you:

• Complete the Account registration form, providing your name, date of birth, email, phone number, and residential address.
• Submit identity verification documents during the KYC process (KTP, passport, utility bills, bank statements).
• Enter bank account or e-wallet details to deposit or withdraw funds in IDR.
• Contact our support team via email or live chat with questions or concerns.
• Opt into marketing communications or adjust your communication preferences within Account settings.

Automated Collection

We automatically collect certain data when you access or use the Platform, including:

• Technical data such as IP address, device type, browser version, and operating system, captured via server logs.
• Session data including login timestamps, session duration, and pages viewed, gathered via cookies and analytics tools.
• Gaming activity data such as wager amounts, game outcomes, bonus activations, and responsible gaming tool usage, recorded within our core gaming platform.

Third-Party Sources

We may receive Personal Data from trusted third parties in specific circumstances:

• Payment processors and banks may confirm transaction authenticity and ownership of payment methods.
• Identity verification service providers may supply additional validation of documents you submit during KYC.
• Fraud prevention networks may share risk intelligence related to IP addresses or devices associated with known fraudulent activity.

luck99 processes your Personal Data exclusively for the following legitimate purposes:

• Account Management: To create, maintain, and administer your Account, including authenticating your identity each time you log in.
• Age Verification: To confirm you are at least 21 years old in compliance with our responsible gaming obligations and the eligibility criteria set out in our Terms & Conditions.
• KYC & AML Compliance: To verify your identity and address, and to screen for money laundering or financial crime risk in accordance with international AML standards.
• Processing Transactions: To facilitate deposits and withdrawals through BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja in IDR.
• Delivering Gaming Services: To provide access to sports betting, casino games, live dealer tables, slots, and entertainment including togel, bandar bola, and sabung ayam content.
• Responsible Gaming Monitoring: To track your deposit, wagering, and session patterns and trigger responsible gaming interventions where behavior suggests potential harm.
• Bonus & Promotion Administration: To determine your eligibility for bonuses, track wagering requirements, and prevent bonus abuse.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance in English and Bahasa Indonesia.
• Security & Fraud Prevention: To detect, investigate, and prevent unauthorized access, multi-accounting, collusion, and other prohibited conduct outlined in Section 10 of our Terms.
• Platform Improvement: To analyze usage patterns and optimize the user experience, interface design, and game selection on luck99.
• Marketing Communications: Where you have consented, to send you promotional offers, bonus announcements, and updates about new games or features. You may withdraw consent at any time.
• Legal & Regulatory Obligations: To comply with applicable laws, respond to lawful requests from authorities, and enforce our contractual agreements.

luck99 processes your Personal Data under one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contractual obligations under the Terms & Conditions, including providing gaming services, processing payments, and maintaining your Account.
• Legal Obligation: Processing is required to comply with applicable legal obligations, including age verification, KYC, AML screening, and responding to lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing is necessary for our legitimate business interests in preventing fraud, securing the Platform, improving our services, and ensuring fair play, provided these interests do not override your fundamental rights and freedoms.
• Consent: Where required by law or where we ask separately, processing is based on your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing conducted prior to withdrawal.

luck99 does not sell, rent, or trade your Personal Data to unrelated third parties for marketing purposes. However, we share data with trusted third parties under the following circumstances:

Service Providers

We share Personal Data with third-party service providers who assist in delivering and supporting the Platform, including:

• Payment processors and banks that facilitate deposits and withdrawals in IDR through local Indonesian payment methods.
• Identity verification and KYC service providers that validate documents and screen for fraud risk.
• Cloud hosting providers that store data securely on our behalf.
• Customer support platform providers that manage communication channels.
• Analytics providers that help us understand usage patterns and improve the Platform.

All service providers are contractually obligated to process data only for the specified purposes, maintain confidentiality, and implement appropriate security measures.

Game Providers

When you play games from providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, or Pocket Games Soft, limited session data (username, bet amounts, timestamps) may be shared with these providers to deliver the gaming experience and record outcomes.

Legal & Regulatory Disclosures

We may disclose Personal Data where legally required to:

• Comply with court orders, subpoenas, or lawful requests from government authorities.
• Respond to regulatory inquiries or audits related to gaming licensing or AML compliance.
• Enforce our Terms & Conditions or investigate suspected violations.
• Protect the rights, property, or safety of luck99, our Users, or the public.

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your Personal Data may be transferred to a successor entity. We will notify you of any such transfer and inform you of any changes to data handling practices.

luck99 retains your Personal Data for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations:

• Active Accounts: Data is retained for the duration your Account remains open and active.
• Closed Accounts: Following Account closure, we retain Identity Data, Financial Data, and Transaction History for a minimum of seven (7) years to comply with AML record-keeping obligations and to resolve any post-closure disputes.
• Marketing Data: If you opt out of marketing communications, we retain a record of your opt-out preference indefinitely to honor that choice.
• Support Records: Communication logs are retained for up to three (3) years for quality assurance and dispute resolution purposes.
• Technical & Session Data: Server logs and session data are typically retained for up to two (2) years for security and fraud analysis.

Following the expiration of applicable retention periods, Personal Data is securely deleted or anonymized such that it can no longer identify you.

luck99 employs industry-standard technical and organizational security measures to protect your Personal Data from unauthorized access, disclosure, alteration, or destruction:

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols.
• Data Encryption at Rest: Sensitive data stored on our servers, including Financial Data and Identity Data, is encrypted using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted to authorized personnel on a need-to-know basis, with multi-factor authentication and role-based permissions enforced.
• Regular Security Audits: We conduct periodic vulnerability assessments and penetration testing to identify and remediate security weaknesses.
• Secure Data Centers: Data is hosted in secure, certified data centers with physical access controls, fire suppression, and redundant power supplies.
• Fraud Monitoring: Automated systems monitor for suspicious activity including multi-accounting, unusual login patterns, and payment anomalies.

While we implement robust safeguards, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your login credentials and for notifying us immediately if you suspect unauthorized access to your Account.

luck99 uses cookies and similar tracking technologies to enhance your experience on the Platform and to gather analytics data. Cookies are small text files stored on your device that allow us to recognize you across sessions.

Types of Cookies We Use

• Essential Cookies: Required for the Platform to function, including session management, authentication, and security features. These cookies cannot be disabled.
• Preference Cookies: Store your language settings, game preferences, and other customization choices to personalize your experience.
• Analytics Cookies: Collect aggregated data about how Users interact with the Platform, helping us understand popular features and optimize performance.
• Marketing Cookies: Track your activity across sessions to deliver relevant promotional content and measure campaign effectiveness (only used with your consent).

Managing Cookies

Most web browsers allow you to control cookies through their settings. You can choose to block or delete cookies; however, disabling essential cookies will impair your ability to use the Platform. Disabling analytics or marketing cookies will not affect core functionality.

Subject to applicable law, you hold the following rights with respect to your Personal Data:

• Right of Access: You may request a copy of the Personal Data we hold about you, including details of how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. You can update most information directly within your Account settings.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes collected, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we limit the processing of your Personal Data in certain circumstances, such as while disputing accuracy or challenging the lawfulness of processing.
• Right to Data Portability: You may request a machine-readable copy of your Personal Data to transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless we demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting prior lawful processing.

To exercise any of these rights, please contact our support team at the email address provided in Section 15. We will respond to your request within thirty (30) days. Verification of your identity will be required before fulfilling data subject requests.

The luck99 Platform is strictly intended for individuals aged 21 years or older. We do not knowingly collect Personal Data from individuals under the age of 21.

If we become aware that we have inadvertently collected Personal Data from a minor, we will take immediate steps to delete that data and permanently close the associated Account. Any funds deposited by or credited to an underage Account will be forfeited in accordance with Section 2 of our Terms & Conditions.

If you believe a minor has registered an Account on luck99, please contact our support team immediately so we can investigate and take appropriate action.

The Platform may contain links to third-party websites or services, including payment processors, game provider sites, or responsible gaming resources. luck99 is not responsible for the privacy practices or content of these external sites.

We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies exclusively to Personal Data collected and processed by luck99 through the Platform.

luck99 primarily serves players resident in Indonesia. However, in the course of providing our services, your Personal Data may be transferred to and processed in jurisdictions outside Indonesia, including by our service providers and technology partners.

Where data is transferred internationally, we ensure that appropriate safeguards are in place, such as standard contractual clauses, adequacy decisions, or binding corporate rules, to protect your Personal Data in accordance with applicable data protection standards.

luck99 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements.

When material changes are made, we will notify you by email to the address registered on your Account and display a prominent notice on the Platform homepage. The "Last Updated" date at the top of this policy will reflect the date of the most recent revision.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree to the updated policy, you must cease using the Platform and may request Account closure.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data, please contact the luck99 Data Protection Team:

When submitting a data subject request (access, rectification, erasure, etc.), please include your registered Account username and a clear description of your request. For security purposes, we will verify your identity before processing any request that involves access to or modification of your Personal Data.