Privacy & Data Security

Privacy Policy 99kr – User Data Protection Platform

At 99kr, your privacy is more than a formality. This document transparently explains what data we collect, how we use it, and the concrete steps we take to protect it from any threat.

Last updated: January 1, 2026
Commitment Privacy 99kr

Six core principles that form the foundation of how we handle every user's personal data

End-to-End Encryption

All data transmitted between your device and 99kr servers is encrypted using 256-bit SSL. No data travels in plain text or can be read by unauthorized third parties.

Secure Data Storage

User data is stored on servers protected by a multi-layered security system — including firewalls, role-based access controls, and real-time intrusion monitoring around the clock.

You Are in Control

You have the right to access, update, or delete the personal data we hold. Requests are processed by our team within a reasonable timeframe through official support channels.

Not Sold to Third Parties

User personal data is never sold, rented, or traded to any third party for marketing or commercial purposes without the explicit consent of the data owner.

Minimal Use and Clear Purpose

We only collect data that is strictly necessary to operate our services. Each type of data collected has a clear purpose and is not used for anything beyond that.

Full Transparency

This policy is written in plain language — not dense legal jargon. We believe users deserve to know exactly what happens with their data.

This Privacy Policy applies to all users who access, register, or use the services of 99kr in any form. By using our platform, you confirm that you have read and agreed to the policies set out here.

Section 1

Introduction and Scope

99kr deeply values the trust users place in us when choosing our platform as their digital entertainment destination. That trust can only be maintained through transparency about how personal data is handled — and that is the primary purpose of this document.

This Privacy Policy explains in detail: what types of data we collect from users, how that data is collected, the purposes for which it is used, who it may be shared with under certain conditions, how long it is retained, and what rights you have over your own personal data.

This document applies to all services provided by 99kr, including the web platform, mobile app, customer support services, and all other features linked to user accounts. This policy also applies to data collected offline through official interactions between users and the 99kr team.

Section 2

Types of Personal Data We Collect

99kr collects various types of data necessary to operate our services safely and effectively. The following are the categories of data we may collect from users:

Full name
Date of birth
Email address
Phone number
Residential address
Identity document (National ID/passport)
Bank account information
Digital wallet data
Location data (IP address)
Device and browser information
Transaction history
Gaming activity history

Not all of the above data is collected from every user. Data collected depends on the type of interaction and services used. We apply the principle of data minimization — only collects what is strictly necessary.

Section 3

How We Collect Data

Data is collected through several different methods, depending on the interactions that occur between the user and the platform 99kr:

  • Account registration — When you create a new account, basic identity data is collected directly from the form you complete
  • KYC Verification — Official identity documents are collected during the verification process before the first withdrawal is processed
  • Financial transactions — Account details and payment information are collected when you make a deposit or submit a withdrawal
  • Platform usage — Navigation activity, game sessions, and interactions with platform features are automatically recorded by the system
  • Support communications — Conversations with the customer service team are recorded for training and dispute resolution purposes
  • Cookies and tracking technology — Device technical data and preferences are collected via cookies with user consent
Section 4

Purpose of Personal Data Use

Data collected by 99kr used exclusively for purposes relevant to the operation of our services. The following are the specific purposes for which this data is used:

  • Account creation and management — Verifying identity, processing registrations, and maintaining active account profiles
  • Transaction processing — Facilitating deposits and withdrawals securely and accurately
  • Fraud prevention and security — Detecting suspicious activity, preventing abuse, and protecting platform integrity
  • Regulatory compliance — Meeting legal obligations including anti-money laundering (AML) and Know Your Customer (KYC)
  • Service personalization — Personalizing the platform experience based on user preferences and usage history
  • Service communications — Sending important notifications regarding accounts, transactions, and policy updates
  • Product improvement — Analyzing usage patterns to continuously improve features and service quality
  • Customer support — Providing accurate and efficient assistance when users need support

99kr does not use user data for third-party marketing purposes without explicit consent. Promotional communications are only sent to users who have actively opted in during registration or through notification settings.

Section 5

Sharing Data with Third Parties

99kr does not sell or rent users' personal data to any party. However, under certain conditions necessary for service operations, data may be shared with the following parties:

  • Payment service providers — Minimal required transaction data is shared with payment gateways (banks, GoPay, OVO, Dana, etc.) to process transactions securely
  • Technology service providers — Technology partners who assist in operating the platform infrastructure, bound by strict confidentiality agreements
  • Legal and regulatory authorities — Data may be shared with authorities if required by applicable law, court order, or official investigation
  • Identity verification partners — Accredited third-party KYC verification services to validate the authenticity of identity documents

All third-party partners working with 99kr are required to sign confidentiality agreements and may only use shared data for purposes explicitly defined in the cooperation contract.

99kr never shares user data with data brokers, advertising platforms, or marketing companies for commercial purposes. If you receive a communication claiming to be from 99kr but appears suspicious, contact our support team immediately.

Section 6

Data Security and Protection Measures

Protecting user data is a responsibility we take very seriously. 99kr implements a range of technical and organizational measures to ensure data is stored and transmitted securely:

  • 256-bit SSL Encryption for all communications between user devices and servers
  • Data at rest encryption (data at rest encryption) for sensitive information such as identity data and account details
  • Role-based access control — only authorized personnel may access specific data relevant to their role
  • Audit log for all access to sensitive user data, including timestamps and the identity of staff who accessed it
  • Penetration testing periodically by an independent security team to identify and close security vulnerabilities
  • Intrusion detection system that actively monitors database access anomalies in real time
  • Encrypted backup periodically to prevent data loss due to technical incidents

While no security system can guarantee 100% protection, 99kr is committed to continuously raising security standards in line with the latest cybersecurity threats. Our security team works 24/7 to ensure the platform remains secure.

Section 7

Cookies & Tracking Technology

99kr uses cookies and similar technologies to enhance user experience, ensure session security, and analyze how the platform is used. The following are the types of cookies we use:

  • Essential cookies — Required for core platform functions such as keeping login sessions active and remembering language preferences. These cookies cannot be disabled.
  • Security cookies — Used to detect suspicious activity, prevent CSRF (Cross-Site Request Forgery), and protect user sessions from hijacking.
  • Analytics cookies — Helps us understand how users interact with the platform so we can continually improve the experience. Data collected is aggregated and anonymized.
  • Preference cookies — Saving your display preferences and settings so you don't have to re-enter them on every visit.

You can manage cookie settings through your browser preferences. Please note that disabling essential cookies may significantly affect platform functionality.

Section 8

Data Retention and Deletion

99kr retains users' personal data for as long as necessary to fulfill the purpose of its collection, or as required by applicable legal provisions. The following are general data retention guidelines:

  • Active account data — Retained while the account is active and for the period required by regulations after account closure
  • Transaction history — Retained for a minimum of 5 years in accordance with anti-money laundering regulatory requirements
  • KYC documents — Retained while the account is active plus the period stipulated by the relevant authority after closure
  • CS communication logs — Retained for a maximum of 2 years unless there is an unresolved dispute
  • Anonymous analytics data — May be stored indefinitely as it cannot be linked back to an individual's identity

Once the retention period ends, data will be securely deleted using permanent deletion methods that ensure the data cannot be recovered.

Section 9

User Rights Over Personal Data

Every user 99kr have the following rights over their personal data. To exercise these rights, contact our customer service team via live chat:

RIGHT 1
Right to Access

You have the right to request a copy of the personal data we hold about you, including details on how it is used and with whom it has been shared.

RIGHT 2
Right to Data Rectification

If the data we hold is inaccurate or outdated, you have the right to request a correction. Our team will process data correction requests within a reasonable timeframe.

RIGHT 3
Right to Erasure

You may request the deletion of your personal data under certain conditions, such as when your account is closed. However, some data must be retained to comply with applicable legal obligations.

RIGHT 4
Right to Restriction of Processing

In certain situations, you may ask us to restrict how we process your data — for example, while the accuracy of your data is being verified or disputed.

RIGHT 5
Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another platform, where technically feasible.

RIGHT 6
Right to Object

You have the right to object to certain data processing activities, particularly those carried out based on our legitimate interests. All objections will be reviewed and addressed seriously by our team.

Section 10

Protection of Minors' Data

Services 99kr is strictly intended for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

If we discover or receive credible reports that a person below the minimum age has created an account and provided personal data, we will immediately deactivate that account and delete all associated data in accordance with applicable procedures.

If you become aware of any underage individual using this platform, please report it to our customer service team immediately. Such reports will be acted upon with the highest priority.

Section 11

Changes to the Privacy Policy

99kr reserves the right to update this Privacy Policy from time to time to reflect changes in data processing practices, new legal requirements, or platform service developments. All updates will be published on this page with a revised update date.

For material and significant changes, we will notify users via their registered email or in-platform notification at least 7 days before the changes take effect.

Continued use of the platform after any changes take effect will be considered acceptance of the updated policy. We recommend users check this page periodically.

Section 12

Contact Us for Privacy Inquiries

If you have any questions, concerns, or requests regarding how 99kr handles your personal data, our team is ready to help. The fastest way to get a response is through the live chat available directly on the platform — our team is active 24 hours a day with an average response time of under 3 minutes.

For formal requests related to data rights (access, correction, deletion), you may also submit a written request through official support channels, including the required identity verification for security purposes.

Reach the 99kr privacy support team via live chat on the platform for all personal data-related inquiries. Our dedicated team handles privacy requests with clear procedures and high priority.

Safe & Trusted Platform

Join 99kr — Your Data Is Safe With Us

Enjoy the best gaming experience with complete peace of mind — your privacy and data security are always 99kr's top priority.

This platform is for users aged 18 and above.

Bahasa Indonesia