Privacy Policy

999j ("we", "us", "our") operates an online betting and gaming platform at https://999j.cam. We are committed to protecting the privacy and security of our Members' personal data in accordance with international data protection standards and best practices.

This Privacy Policy applies to all personal information collected through the 999j platform, including information collected during account registration, KYC verification, deposit and withdrawal transactions, gameplay activity, customer support interactions, and marketing communications.

We collect and process personal data only to the extent necessary to provide our services, comply with legal obligations, and protect the security and integrity of our platform. We do not sell or rent personal data to third parties for their marketing purposes.

999j is the data controller responsible for the personal information you provide to us. This means we determine the purposes and means of processing your personal data and are accountable for ensuring that your data is handled in accordance with applicable privacy laws and regulations.

If you have any questions about how we handle your personal data, or if you wish to exercise any of your privacy rights (see Clause 10), please contact our Data Protection Officer at [email protected].

3.1 Account Registration Information: When you register for a 999j account, we collect the following personal information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify that you are at least 21 years of age)
• Email address
• Mobile phone number
• Residential address (street address, city, postal code)
• Username and password (password is encrypted and stored securely)
• Preferred currency (IDR)

3.2 KYC Verification Documents: To comply with identity verification and anti-fraud requirements, we collect copies of government-issued identification documents, including:

• Indonesian KTP (Kartu Tanda Penduduk) or other government-issued photo ID
• Proof of address (utility bill or bank statement dated within the last 3 months)
• Selfie photograph holding your ID (to verify that the document belongs to you)

3.3 Financial Transaction Information: We collect information about your deposits, withdrawals, and betting activity, including:

• Payment method details (bank account name, e-wallet account identifier)
• Transaction amounts, dates, and times
• Transaction IDs and confirmation receipts
• Account balance and transaction history

3.4 Gameplay and Betting Activity: We log information about your use of the 999j platform, including:

• Bets placed, stakes, odds, and outcomes
• Games played, session duration, and results
• Bonuses claimed and wagering progress
• Deposit limits, loss limits, and responsible gaming tool usage

3.5 Technical and Device Information: When you access 999j, we automatically collect certain technical data, including:

• IP address and geolocation data (to verify that you are accessing from a permitted jurisdiction)
• Device type, operating system, browser type and version
• Screen resolution, language preferences, time zone
• Cookies and similar tracking technologies (see Clause 11)
• Clickstream data, page views, referral URLs

3.6 Customer Support Communications: When you contact our support team via live chat or email, we record the content of your communications, including your questions, complaints, and our responses, to improve service quality and resolve disputes.

We collect your personal data through the following methods:

• Directly from you: When you voluntarily provide information during account registration, KYC verification, deposit and withdrawal requests, or customer support interactions.
• Automatically: Through cookies, log files, and similar technologies when you visit and interact with the 999j platform.
• From third parties: We may receive limited information from payment processors (to confirm transaction completion) and from identity verification services (to verify the authenticity of submitted documents).

999j uses your personal data for the following purposes:

• Account management: To create and maintain your 999j account, authenticate your identity, and enable you to access our services.
• Transaction processing: To process deposits, withdrawals, and betting transactions, and to maintain accurate financial records.
• KYC and compliance: To verify your identity and age (21+ requirement), prevent fraud, comply with anti-money laundering (AML) regulations, and meet legal and regulatory obligations.
• Platform security: To detect and prevent unauthorized access, fraudulent activity, collusion, bonus abuse, and other prohibited conduct.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Responsible gaming: To enforce age restrictions, monitor for signs of problem gambling, and apply responsible gaming tools such as deposit limits, loss limits, and self-exclusion.
• Product improvement: To analyze platform usage patterns, optimize user experience, and develop new features and services.
• Marketing communications: To send you promotional offers, bonus notifications, and service updates (you may opt out of marketing emails at any time).
• Legal compliance: To comply with applicable laws, regulations, court orders, and government requests.

We process your personal data on the following legal grounds:

• Contractual necessity: Processing is necessary to perform our contractual obligations to you under the 999j Terms & Conditions, including providing gaming services, processing transactions, and managing your account.
• Legal obligation: Processing is required to comply with legal and regulatory requirements, including KYC/AML regulations, age verification laws, and tax reporting obligations.
• Legitimate interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, customer support, and product improvement, provided these interests do not override your fundamental rights and freedoms.
• Consent: Where required by law, we obtain your explicit consent before processing certain types of data, such as sending you marketing communications. You may withdraw consent at any time.

999j does not sell, rent, or trade your personal data to third parties for their marketing purposes. However, we may share your information with the following categories of recipients under strict confidentiality obligations:

• Payment processors: We share necessary financial information with banks and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay) to process deposits and withdrawals.
• Identity verification services: We share KYC documents with third-party verification providers to authenticate the identity documents you submit during account verification.
• Game providers: We share limited gameplay data with third-party game studios (Pragmatic Play, Evolution Gaming, etc.) to enable game functionality and resolve technical issues.
• Customer support tools: We use third-party live chat and ticketing systems to provide customer support. These providers have access to your support communications under strict data protection agreements.
• Legal and regulatory authorities: We may disclose your information to law enforcement, regulatory bodies, courts, or government agencies if required by law or in response to a valid legal request.
• Fraud prevention networks: We may share information about fraudulent accounts or suspicious activity with industry fraud prevention databases to protect the integrity of the online gaming ecosystem.

All third-party service providers are contractually required to protect your data, use it only for the purposes specified by 999j, and comply with applicable data protection laws.

999j retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, accounting, and reporting obligations.

Typical data retention periods are as follows:

After the applicable retention period expires, we securely delete or anonymize your personal data in accordance with our data deletion procedures.

999j implements robust technical and organizational security measures to protect your personal data against unauthorized access, loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Sensitive data stored on our servers is encrypted at rest.
• Access controls: Access to personal data is restricted to authorized 999j personnel who require access to perform their duties. All staff are bound by confidentiality obligations.
• Password security: User passwords are hashed using industry-standard algorithms (bcrypt, Argon2) and cannot be accessed by 999j staff in plaintext form.
• Firewall and intrusion detection: Our servers are protected by enterprise-grade firewalls and intrusion detection systems that monitor for suspicious activity 24/7.
• Regular security audits: We conduct periodic security assessments, penetration testing, and vulnerability scans to identify and remediate potential weaknesses.
• Secure data centers: Our servers are hosted in ISO 27001 certified data centers with physical security controls, redundant power, and comprehensive disaster recovery procedures.
• Data backups: We maintain regular encrypted backups of your data to prevent loss in the event of system failure or disaster.

While we employ industry-leading security practices, no method of data transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account login credentials and should immediately notify us if you suspect unauthorized access to your account.

Under applicable data protection laws, you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data in certain circumstances (e.g., when the data is no longer necessary for the purposes for which it was collected). Note that we may be required to retain certain data for legal or regulatory compliance purposes.
• Right to restrict processing: You may request that we temporarily suspend processing of your personal data in certain situations.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing of your personal data for direct marketing purposes or based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request." We will respond to your request within 30 days. Please note that this email address is for display purposes only and is not clickable per platform policy.

999j uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognize you when you return to our site.

Types of cookies we use:

• Essential cookies: Required for core platform functionality, including session management, authentication, and security. These cookies cannot be disabled.
• Functional cookies: Remember your preferences (language, currency, display settings) to personalize your experience.
• Analytics cookies: Collect anonymous usage statistics to help us understand how visitors interact with our platform and identify areas for improvement.
• Marketing cookies: Track your activity across websites to deliver personalized promotional offers and measure the effectiveness of marketing campaigns.

You can control cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 999j platform.

999j operates internationally, and your personal data may be transferred to, stored in, and processed in countries outside of Indonesia. When we transfer your data internationally, we ensure that appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

These safeguards may include standard contractual clauses approved by regulatory authorities, adequacy decisions recognizing equivalent data protection standards, or other legally recognized transfer mechanisms.

999j strictly enforces a 21+ age policy. Our services are not intended for persons under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age.

If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that information and close the associated account.

Parents and guardians who believe that a minor has provided personal information to 999j should contact us immediately at [email protected].

999j reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations.

Material changes to this Privacy Policy will be communicated to Members via email notification and/or a prominent notice on the 999j homepage. The "Last updated" date at the top of this policy indicates when the most recent changes were made.

Your continued use of the 999j platform after we post changes to this Privacy Policy constitutes your acceptance of those changes. We encourage you to review this Privacy Policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer:

• Email: [email protected] (please note: this is display text only — email addresses are not clickable on this site per platform policy)
• Subject Line: For privacy-related inquiries, please use the subject line "Privacy Inquiry" or "Data Protection Request"
• Response Time: We aim to respond to all privacy inquiries within 5 business days, and to formal data subject rights requests within 30 days as required by law

999j takes your privacy seriously and is committed to addressing your concerns promptly and professionally.