Privacy Policy — ags99

ags99 operates as an online sports betting and casino platform serving English-preference players primarily based in Indonesia. In the course of providing our services — including account registration, sportsbook wagering, casino gaming, payment processing, and customer support — we necessarily collect and process certain personal data about the individuals who use our platform.

This Privacy Policy sets out, in plain and precise terms, the categories of data we collect, the purposes for which we process that data, the parties with whom we may share it, the security measures we apply to protect it, and the rights that Players in Indonesia and other supported jurisdictions may exercise in respect of their own data.

We do not sell personal data to third parties for marketing purposes. We do not share personal data with unaffiliated third parties except as necessary to deliver our services, comply with legal obligations, or protect the integrity of our platform — all as described in detail in Section 7 of this Policy.

For the purposes of this Privacy Policy, the data controller responsible for your personal data is the ags99 platform operating entity, accessible at https://ags99.bet. When we refer to "ags99", "we", "us", or "our" in this Policy, we mean the entity that operates the ags99 platform and determines the purposes and means of processing your personal data.

If you have any questions about this Privacy Policy or wish to exercise any of the rights described in Section 11, you may contact our Data Protection team using the contact details set out in Section 16 of this Policy. We aim to respond to all privacy-related enquiries within 30 days of receipt.

The following table summarizes the categories of personal data that ags99 may collect about you, together with examples of the specific data points within each category:

We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, or data concerning health (beyond responsible gaming disclosures made voluntarily by the Player) unless required by law or regulation. We do not collect biometric data for identification purposes.

ags99 collects personal data through the following channels:

• Direct Submission: Data you actively provide when registering an Account, completing KYC verification, submitting a deposit or withdrawal request, contacting customer support, or filling out any form on the Platform.
• Automated Technologies: Data collected automatically through cookies, web beacons, server logs, and device fingerprinting tools as you navigate and interact with the ags99 Platform. See Section 8 for full details on our use of cookies.
• Payment Providers: Confirmation data received from Indonesian payment processors and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when you initiate a deposit or withdrawal. We receive only the minimum data necessary to match a transaction to your Account — we do not receive your full bank login credentials or card PIN.
• Identity Verification Partners: Where KYC checks require document verification, we may receive confirmation data from third-party identity verification services engaged by ags99 for this specific purpose.
• Third-Party Analytics Providers: Aggregated, anonymized behavioral analytics data from platform analytics tools used to improve the user experience. This data does not identify you individually.
• Publicly Available Sources: In cases of suspected fraud or prohibited conduct, ags99 may consult publicly available sources to corroborate information provided during registration or KYC verification.

ags99 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to register your Account, process deposits and withdrawals, settle bets, administer bonuses, and provide the core gaming and betting services you have requested. Without this processing, ags99 cannot perform its contractual obligations to you as a Player.
• Legitimate Interests: Processing carried out in pursuit of ags99's legitimate business interests, provided those interests are not overridden by your own privacy rights. This includes fraud prevention, platform security monitoring, responsible gaming enforcement, and platform performance optimization.
• Legal Obligation: Processing required for ags99 to comply with applicable anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and any lawful request from a competent authority or court of jurisdiction.
• Consent: Where ags99 sends you marketing communications or optional personalized promotions, we do so on the basis of your consent. You may withdraw this consent at any time by contacting our support team or using the unsubscribe mechanism provided in any marketing communication, without affecting the lawfulness of processing carried out prior to withdrawal.

ags99 uses the personal data we collect for the following specific purposes:

• Account Administration: Creating and maintaining your Player Account, verifying your identity and age (21+ requirement), processing login sessions, and managing your Account preferences and security settings.
• Payment Processing: Accepting and crediting deposits made via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja; processing withdrawal requests to your registered IDR bank account or e-wallet; maintaining accurate financial records of all transactions.
• Gaming and Betting Services: Recording and settling bets placed on sportsbook markets (including BRI Liga 1, EPL, Champions League, and international tournaments), processing casino game sessions, managing poker tournament entries and prize distributions, and administering capsa susun game rounds.
• Bonus and Promotion Administration: Determining eligibility for bonuses and promotional offers, tracking wagering requirement progress, applying bonus credits, and communicating relevant promotions — including seasonal offers tied to Indonesian events such as Idul Fitri, Imlek, and Independence Day — to eligible Players.
• Fraud Prevention and Platform Integrity: Detecting and investigating suspicious account activity, identifying duplicate or fraudulent accounts, enforcing single-account policy, monitoring for match-fixing or bonus abuse patterns, and conducting AML screening on large transactions.
• Responsible Gaming: Monitoring for indicators of problem gambling, enforcing Player-set deposit and session limits, administering self-exclusion requests, and contacting Players who display concerning patterns of gaming behavior.
• Customer Support: Responding to Player enquiries, resolving disputed bets, investigating complaints, and maintaining records of support interactions for quality assurance and audit purposes.
• Platform Improvement: Analyzing aggregated usage data to improve game selection, navigation, payment flows, and overall platform performance. This analysis uses anonymized or pseudonymized data wherever possible.
• Legal Compliance: Retaining records as required by applicable law, responding to lawful requests from competent authorities, and enforcing ags99's Terms & Conditions.

ags99 does not sell your personal data. We share personal data only in the following limited and controlled circumstances:

• Payment Service Providers: We share your financial data — including bank account details and transaction amounts — with Indonesian payment processors, bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) as strictly necessary to process your deposits and withdrawals. These providers are contractually bound to use your data only for payment processing purposes.
• Identity Verification Providers: Where KYC verification requires document-based identity checks, your identity documents and the data contained therein may be shared with our contracted identity verification partners. These partners process your data solely for the purpose of completing the verification check and are prohibited from using it for any other purpose.
• Game Content Providers: Licensed game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) may receive minimal session data necessary for game delivery and RNG certification. No personally identifiable information beyond a pseudonymous session token is typically shared with game studios.
• IT and Security Service Providers: Third-party providers of cloud hosting, cybersecurity monitoring, DDoS protection, and platform infrastructure services may process technical and usage data in the course of providing their services to ags99. All such providers are engaged under strict data processing agreements.
• Regulatory and Law Enforcement Authorities: ags99 will disclose personal data to competent authorities, law enforcement agencies, or courts where required to do so by applicable law, valid legal process, or in response to a legitimate request related to the prevention or investigation of fraud, money laundering, or other criminal activity.
• Professional Advisers: In limited circumstances, personal data may be disclosed to ags99's legal advisers, auditors, or accountants where strictly necessary for the performance of their professional services, subject to confidentiality obligations.

ags99 uses cookies and similar tracking technologies to operate, secure, and improve the Platform. The following categories of cookies are used:

You may control optional cookies through your browser settings. Most modern browsers allow you to refuse or delete cookies, though doing so may impair certain platform features such as persistent login sessions and personalized game recommendations. Essential and security cookies cannot be disabled, as they are necessary for the secure operation of the Platform.

ags99 does not use third-party advertising cookies or retargeting pixels that would track your activity across websites outside of the ags99 Platform.

ags99 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active Account plus a minimum of five years following Account closure, to satisfy AML record-keeping obligations and to handle any post-closure disputes or regulatory inquiries.
• Transaction and Betting Records: Retained for a minimum of five years from the date of each transaction, in accordance with applicable financial record-keeping requirements.
• KYC and Identity Documents: Retained for the duration of your Account plus five years following closure, or longer if required by a specific legal obligation or ongoing investigation.
• Customer Support Records: Retained for three years from the date of the last interaction, for quality assurance, audit, and dispute resolution purposes.
• Marketing Preferences: Retained until you withdraw your consent to receive marketing communications. Proof of consent and withdrawal of consent is retained for five years for compliance purposes.
• Responsible Gaming Records: Self-exclusion records and responsible gaming limit settings are retained for the duration of the exclusion or limit period and for five years thereafter, to prevent circumvention by re-registration.
• Technical and Log Data: Server logs and device data are retained for 90 days under normal circumstances, and for up to five years where they are relevant to an active fraud investigation or legal proceeding.

Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymized such that it can no longer be linked to an individual Player.

ags99 implements a comprehensive set of technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes the following controls:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and ags99 servers is encrypted using 256-bit SSL/TLS protocols — the same standard used by Indonesia's major banks including BCA, BRI, and BNI. This prevents interception of your data in transit.
• Encrypted Storage: Sensitive data fields — including bank account numbers, identity document details, and password hashes — are encrypted at rest within our secure database infrastructure. Passwords are stored exclusively as salted cryptographic hashes; ags99 staff cannot retrieve your original password.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. ags99 staff are granted only the minimum level of access required to perform their specific role. All internal data access is logged and audited.
• Anomalous Session Detection: Our security systems continuously monitor for login anomalies — including logins from unfamiliar IP addresses or devices — and may trigger additional verification steps or temporary Account holds where suspicious activity is detected.
• Regular Security Audits: ags99 conducts periodic security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential weaknesses in our platform infrastructure.
• Staff Training: All ags99 personnel who handle personal data receive regular data-protection and cybersecurity training. Strict confidentiality obligations are embedded in employment contracts.

Despite these measures, no digital platform can guarantee absolute security in all circumstances. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, ags99 will notify affected Players without undue delay and will take all reasonable steps to contain and remediate the breach.

As a Player on the ags99 Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team using the details in Section 16. We will respond to all verified requests within 30 days:

• Right of Access: You have the right to request a copy of the personal data that ags99 holds about you, together with information about how it is being processed. We will provide this information in a clear, structured format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic Account details, you may also update information directly within your Account settings.
• Right to Erasure: In certain circumstances, you may request that ags99 delete your personal data. This right is subject to limitations where data must be retained for legal compliance purposes (e.g., AML record-keeping obligations). We will inform you of any applicable retention obligations that prevent full erasure.
• Right to Restriction of Processing: You may request that ags99 restrict the processing of your data — for example, while a rectification request is pending — rather than deleting it entirely.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your personal data in a structured, machine-readable format (such as CSV or JSON) for transfer to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of ags99's legitimate interests, including profiling for responsible gaming purposes, where your individual circumstances justify such an objection.
• Right to Withdraw Consent: Where processing is based on your consent — specifically, the receipt of marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

The ags99 Platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step in the registration process, and ags99 reserves the right to request documentary proof of age at any point during a Player's use of the Platform.

If ags99 discovers that personal data has been collected from an individual who is under 21 years of age, we will immediately suspend the associated Account, void any bets or gaming activity conducted on that Account, and permanently delete the personal data of the underage individual from our systems — subject to any overriding legal obligation to retain records related to the detection of the age violation itself.

If you are a parent or guardian and believe that a person under your care may have registered on the ags99 Platform, we strongly encourage you to contact our support team immediately via live chat. We treat all underage-access reports as a highest-priority matter.

The ags99 Platform may, from time to time, reference or display content from third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft). While these studios power games accessible within the ags99 environment, they operate under their own data-handling practices governed by their respective privacy policies.

This Privacy Policy applies exclusively to data processed by ags99 in connection with your use of the ags99 Platform at https://ags99.bet. It does not extend to any third-party websites, platforms, or services that may be referenced in ags99 content. ags99 is not responsible for the privacy practices of any third-party studio, provider, or external website, and we encourage you to review the applicable privacy policies of any third-party services you interact with.

ags99 operates as an internationally licensed platform. In the course of providing services to Players in Indonesia, your personal data may be transferred to and processed in countries outside of Indonesia, including countries where our hosting infrastructure, identity verification partners, or game studio providers are located.

Where such international transfers occur, ags99 ensures that adequate safeguards are in place to protect your personal data, including:

• Engaging only with third-party processors that are contractually bound by data-protection obligations equivalent to or exceeding those applicable under this Privacy Policy.
• Applying standard contractual clauses or equivalent transfer mechanisms recognized under applicable international data-protection frameworks.
• Conducting due-diligence assessments on the data-protection standards of countries to which transfers are made, with additional safeguards applied where necessary.

By registering an Account and using the ags99 Platform, you acknowledge that your personal data may be processed in jurisdictions outside of Indonesia as described in this section.

ags99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or the services we offer. Where changes are material — meaning they meaningfully affect how we process your personal data or the rights available to you — we will provide advance notice by publishing a prominent announcement on the Platform homepage or by notifying you via your registered mobile number or email address.

The "Last Updated" date at the top of this page indicates when the Privacy Policy was most recently revised. Your continued use of the ags99 Platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you should stop using the Platform and may request Account closure as described in our Terms & Conditions.

We recommend that you review this Privacy Policy periodically — at minimum once every six months — to remain informed about how ags99 collects, uses, and protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data ags99 holds about you, please contact our support and data-protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, via the live chat widget on the ags99 Platform. Our team includes native Indonesian-speaking agents who are available around the clock and can handle privacy enquiries in both English and Bahasa Indonesia.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in your subject line and provide your registered username and mobile number so that we can verify your identity before processing your request. Allow up to 30 days for a full response to data-subject rights requests.