Privacy Policy

This Privacy Policy describes how duit99 ("we," "us," or "our") collects, uses, stores, and protects the personal information of users ("you" or "your") who access our website at https://duit99.cam and use our gaming services.

By creating an account on duit99 or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. This Privacy Policy should be read in conjunction with our Terms & Conditions.

We are committed to protecting your privacy and handling your personal data in compliance with applicable data protection laws. If you have questions or concerns about how we process your information, please contact us using the details provided at the end of this document.

The data controller responsible for your personal information is the legal entity operating duit99, incorporated under the laws of its registered jurisdiction. For the purposes of this Privacy Policy, "duit99" refers to this entity and its authorized service providers.

As the data controller, duit99 determines the purposes for which and the means by which your personal data is processed. We are responsible for ensuring that your data is processed lawfully, fairly, and in a transparent manner.

If you have any questions about our data processing activities or wish to exercise your data protection rights, you may contact our Data Protection Officer or customer support team using the contact information provided in Section 13 of this policy.

duit99 collects several categories of personal information to provide, secure, and improve our services. The types of data we collect include:

Automated Data Collection: Some information is collected automatically through cookies, web beacons, and similar tracking technologies when you visit our platform. See Section 6 for more details on cookies and tracking.

duit99 processes your personal information for the following purposes, all of which are necessary to operate our platform and fulfill our contractual obligations to you:

• Account Management: Creating and maintaining your player account, authenticating your login, and managing your profile settings.
• Identity Verification & KYC Compliance: Verifying that you are at least 21 years of age and confirming your identity to prevent fraud, money laundering, and underage gambling in compliance with international gaming regulations.
• Payment Processing: Processing deposits, withdrawals, and refunds through our payment partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, and other payment methods).
• Game Operation & Bet Settlement: Recording your bets, processing game outcomes, calculating winnings, and updating your account balance in real time.
• Bonus & Promotion Management: Determining your eligibility for bonuses, tracking wagering requirements, and awarding promotional credits according to published terms.
• Customer Support: Responding to your inquiries via live chat, email, or phone, troubleshooting technical issues, and resolving disputes.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, collusion, bonus abuse, multi-accounting, and other violations of our Terms & Conditions. This includes monitoring betting patterns, device fingerprints, and IP addresses for suspicious behavior.
• Responsible Gaming: Implementing deposit limits, session time reminders, self-exclusion requests, and other responsible gaming tools as described on our Responsible Gaming page.
• Platform Optimization: Analyzing user behavior and technical performance to improve website speed, fix bugs, and enhance the overall user experience.
• Marketing Communications (Opt-In Only): If you have opted in to receive marketing communications, we may send you promotional emails, SMS messages, or push notifications about new games, bonus offers, and platform updates. You may opt out at any time by clicking "unsubscribe" in any marketing email or contacting support.
• Legal & Regulatory Compliance: Maintaining records as required by gaming authorities, responding to lawful requests from government agencies, and defending legal claims.

duit99 does not sell or rent your personal information to third parties for their own marketing purposes. However, we may share your data with the following categories of third-party service providers who assist us in operating the platform:

• Payment Processors: Your bank account details and transaction data are shared with payment gateways and banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) to process deposits and withdrawals. These processors operate under strict PCI-DSS compliance standards and handle your financial data securely.
• Game Providers: Betting activity and game session data may be shared with third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) to deliver live dealer games, slots, and other content. These providers process data according to their own privacy policies, which are available on their respective websites.
• Identity Verification Services: KYC documents may be shared with specialized identity verification providers who use automated and manual review processes to confirm your identity and detect fraudulent documents.
• Cloud Infrastructure Providers: Your data is stored on secure cloud servers operated by reputable hosting providers with data centers that implement physical and digital security controls.
• Analytics & Security Services: We use third-party analytics tools (such as Google Analytics) and fraud detection services to monitor platform performance and identify security threats. These services process anonymized or pseudonymized data where possible.
• Legal & Regulatory Authorities: We may disclose your personal information to law enforcement, regulators, or government agencies if required by law, court order, or to protect the rights, property, or safety of duit99, our users, or the public.

Data Processing Agreements: All third-party service providers are bound by contractual obligations to protect your data, use it only for the specified purposes, and comply with applicable data protection laws.

duit99 uses cookies, web beacons, and similar tracking technologies to enhance your experience on our platform. A cookie is a small text file stored on your device that allows us to recognize your browser and remember your preferences.

Types of Cookies We Use:

• Essential Cookies: These cookies are necessary for the platform to function. They enable core features such as user authentication, session management, and secure access to your account. Without these cookies, the platform cannot operate properly.
• Performance Cookies: These cookies collect anonymous information about how you use the platform, such as which pages you visit most often and whether you encounter error messages. This data helps us optimize platform performance and fix technical issues.
• Functionality Cookies: These cookies remember your preferences (such as language settings, display options, and favorite games) to provide a more personalized experience.
• Analytics Cookies: We use analytics tools such as Google Analytics to understand user behavior, measure the effectiveness of marketing campaigns, and improve our services. These cookies collect anonymized data about your visit, including pages viewed, time spent on site, and referral sources.

Managing Cookies: You can control and delete cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when a cookie is being sent. Please note that disabling essential cookies may prevent you from using certain features of the platform.

Third-Party Cookies: Some cookies on our platform are set by third-party service providers such as payment processors and game studios. We do not control these third-party cookies, and you should refer to the respective privacy policies of these providers for more information.

duit99 takes the security of your personal information seriously and implements industry-standard technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction.

Our security measures include:

• 256-Bit SSL Encryption: All data transmitted between your device and our servers is encrypted using 256-bit Secure Socket Layer (SSL) technology, the same encryption standard used by banks and financial institutions.
• Secure Data Storage: Personal data is stored on secure servers located in data centers with physical access controls, 24/7 monitoring, and redundant backup systems to prevent data loss.
• Access Controls: Access to your personal information is restricted to authorized personnel who require it to perform their job functions. All employees with access to personal data are bound by strict confidentiality obligations.
• PCI-DSS Compliance: Payment processing is handled by PCI-DSS compliant payment gateways. duit99 does not store full credit or debit card numbers on our servers — all card data is tokenized by our payment processors.
• Fraud Detection Systems: We use automated systems to monitor betting patterns, login attempts, and account activity for suspicious behavior. Accounts exhibiting signs of fraud or compromise are flagged for manual review.
• Regular Security Audits: Our platform undergoes regular security assessments and penetration testing by independent third-party security firms to identify and remediate vulnerabilities.
• Two-Factor Authentication (Optional): We offer optional two-factor authentication (2FA) for an additional layer of account security. We strongly recommend enabling 2FA to protect your account from unauthorized access.

Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. If a data breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you and relevant authorities in accordance with applicable data protection laws.

duit99 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Retention Periods:

• Active Accounts: Personal data associated with active accounts is retained for the duration of your relationship with duit99 and for a period of up to 7 years after account closure, as required by anti-money laundering regulations and gaming authority licensing conditions.
• Closed Accounts: If you request account closure, we will deactivate your account and anonymize or delete your personal information where legally permissible. However, certain data (transaction records, KYC documents, and communications logs) must be retained for regulatory compliance purposes.
• Marketing Data: If you opt out of marketing communications, we will remove you from marketing lists but retain a record of your opt-out preference to ensure we do not contact you again.
• Technical & Analytics Data: Anonymized analytics data and aggregated usage statistics may be retained indefinitely for research and platform improvement purposes, as this data cannot be used to identify individual users.

At the end of the applicable retention period, your personal data will be securely deleted or anonymized so that it can no longer be associated with you.

Under applicable data protection laws, you have the following rights regarding your personal information:

• Right of Access: You have the right to request a copy of the personal data we hold about you. This is commonly known as a "data subject access request." We will provide this information in a structured, commonly used, and machine-readable format.
• Right to Rectification: If any of your personal information is inaccurate or incomplete, you have the right to request that we correct or update it. You can update most information directly through your account settings.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or if you withdraw consent. Note that we may be required to retain certain data for legal or regulatory reasons.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.
• Right to Data Portability: You have the right to receive your personal data in a portable format and request that we transfer it to another service provider where technically feasible.
• Right to Object: You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. If you object to marketing communications, we will immediately cease sending such communications.
• Right to Withdraw Consent: Where we process your personal data based on your consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

Exercising Your Rights: To exercise any of these rights, please contact our customer support team via live chat or email. We will respond to your request within 30 days. In some cases, we may need to verify your identity before processing your request to ensure the security of your personal data.

duit99 is intended exclusively for adults who are at least 21 years of age. We do not knowingly collect personal information from individuals under the age of 21.

If we become aware that a user is under the age of 21, we will immediately close the account, void any bets or winnings, and delete all personal information associated with that account. Deposited funds will be returned to the payment method used for deposit (minus any bonuses that were claimed).

Parents and guardians should monitor their children's online activity and ensure that minors do not access gambling platforms. If you believe that a minor has created an account on duit99, please contact us immediately so we can take appropriate action.

duit99 operates an international gaming platform, and your personal data may be transferred to, stored in, and processed in countries outside of Indonesia where our servers, service providers, or business partners are located.

These countries may have data protection laws that differ from those in Indonesia. However, when we transfer your personal data internationally, we ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

Safeguards for International Transfers:

• We use data processing agreements with third-party service providers that include standard contractual clauses approved by relevant data protection authorities.
• We select service providers that are certified under recognized data protection frameworks and maintain robust security measures.
• We ensure that data transfers comply with applicable data protection regulations, including obtaining your consent where required by law.

duit99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations.

When we make material changes to this Privacy Policy, we will notify you by email (to the address registered on your account) and/or by posting a prominent notice on our platform. The "Last updated" date at the top of this page will always reflect the most recent revision.

Your continued use of the platform after any changes to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Privacy Policy, you should stop using the platform and contact us to close your account.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us through one of the following channels:

• Live Chat: Available 24/7 via the chat icon on our platform. Our Indonesian-speaking support team typically responds within 3 minutes during peak hours.
• Email: [email protected] (please note this is plain text contact information per site specifications, not a clickable link). Email responses typically take 2-4 hours during WIB business hours.
• Data Protection Inquiries: For specific questions about your data protection rights, please mention "Data Protection Request" in the subject line of your email or at the start of your live chat message to ensure your inquiry is routed to the appropriate team.

When contacting us regarding a data protection matter, please include your account username (if applicable) and a clear description of your request. We may need to verify your identity before processing certain requests to protect your personal information.