Privacy Policy — 99jit

99jit ("we", "us", "our") operates the online betting and casino platform accessible at 99jit.net. As part of delivering our services to members based primarily in Indonesia, we necessarily collect and process certain personal data. We are committed to handling that data with transparency, integrity, and the highest practical standard of security.

This Privacy Policy applies to all personal data processed in connection with your use of the 99jit platform, including account registration, deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), identity verification (KYC), customer support interactions, and your general browsing activity on the site.

By registering an account or otherwise using the 99jit platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this policy, you must not use the platform.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

We collect Personal Data in several categories depending on how you interact with the 99jit platform. The table below summarizes the categories and specific data points we may hold about you.

We collect Personal Data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated collection: Technical and behavioral data collected automatically as you browse and use the Platform, via server logs, cookies, and similar tracking technologies (see Section 8).
• Third-party sources: Identity verification data from KYC service providers; fraud and anti-money-laundering screening data from compliance partners; payment confirmation data from banks and e-wallet operators (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja).
• Publicly available sources: Sanctions lists, politically exposed persons (PEP) databases, and other publicly available compliance databases consulted as part of our AML obligations.

99jit uses your Personal Data only for legitimate, specified purposes. The primary purposes for which we process your data are:

• Account management: Creating and maintaining your 99jit account, verifying your identity and age (21+ requirement), and authenticating your login sessions.
• Service delivery: Processing deposits and withdrawals in Indonesian Rupiah (Rp), settling bets and game rounds, crediting bonus funds, and maintaining accurate transaction records.
• KYC compliance: Verifying your identity and the source of your funds as required by our internal compliance standards and applicable international anti-money-laundering (AML) guidelines.
• Customer support: Responding to account inquiries, resolving disputes, processing complaints, and providing assistance through live chat and email at [email protected].
• Fraud prevention and security: Detecting and investigating fraudulent activity, unauthorized access, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: Monitoring account activity for signs of problem gambling, administering self-exclusion and deposit limit tools, and fulfilling our duty-of-care obligations to Members.
• Platform improvement: Analyzing aggregated, anonymized usage data to improve site performance, game selection, and the overall user experience for Members across Indonesia.
• Marketing communications: Sending promotional offers, bonus notifications, and updates about new games or features — only where you have opted in to receive such communications. You may opt out at any time.
• Legal and regulatory compliance: Meeting our obligations under applicable international law, responding to lawful requests from competent authorities, and preserving records for audit purposes.

Every Processing activity we carry out rests on at least one of the following legal bases:

99jit does not sell or rent your Personal Data. We may share your data with the following categories of recipients, strictly to the extent necessary for the stated purpose:

• Payment processors and banks: BCA, BRI, BNI, Mandiri, CIMB Niaga, and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to execute your deposit and withdrawal instructions.
• KYC and compliance providers: Third-party identity-verification and AML screening services that assist us in fulfilling our Know Your Customer obligations receive the minimum data set required to complete the verification.
• Game content providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session identifiers and stake data necessary to operate their games on the Platform. These providers do not receive your full identity data.
• Technology and infrastructure providers: Cloud hosting, content delivery network (CDN), cybersecurity, and IT support vendors who process data on our behalf under strict data-processing agreements that prohibit independent use of your data.
• Fraud prevention networks: Industry-standard shared fraud databases to which we may submit or query data where we have reasonable grounds to suspect fraudulent activity or Bonus abuse.
• Legal and regulatory authorities: Competent courts, law enforcement agencies, or regulatory bodies where we are legally compelled to disclose data by a valid court order, subpoena, or equivalent legal instrument.
• Corporate transactions: In the event of a merger, acquisition, or asset sale, your data may be transferred to the successor entity, subject to at least equivalent privacy protections.

All Third-Party Providers with whom we share Personal Data are contractually bound to process that data only as instructed by 99jit, to maintain appropriate security measures, and not to use your data for their own commercial purposes.

The 99jit Platform uses cookies and similar technologies (local storage, session storage, pixel tags) to operate the site, remember your preferences, maintain your login session, and analyze usage patterns. The categories of cookies we use are described below.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. Disabling functional or analytics cookies will not prevent access but may reduce personalization features.

We retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our standard retention periods are:

• Active account data: Retained for the lifetime of your 99jit account plus five (5) years after permanent account closure, to meet AML record-keeping obligations.
• KYC documents: Retained for five (5) years from the date of submission or from the date of account closure, whichever is later.
• Financial transaction records: Retained for five (5) years from the date of each transaction, in accordance with standard financial compliance requirements.
• Customer support communications: Retained for three (3) years from the date of the last interaction, unless the communication relates to an unresolved dispute, in which case it is retained until final resolution plus two (2) years.
• Analytics and technical data: Retained in anonymized or aggregated form indefinitely; identifiable technical data retained for up to twenty-four (24) months.
• Marketing preferences: Retained until you withdraw consent or unsubscribe, after which your opt-out preference is retained to prevent accidental re-engagement.

When Personal Data is no longer required, it is securely deleted or irreversibly anonymized in accordance with our data destruction procedures.

99jit implements a layered set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• End-to-end TLS 1.3 encryption for all data in transit between your device and our servers;
• AES-256 encryption for Personal Data and financial records stored at rest;
• Bcrypt hashing with per-account salting for all stored passwords — we cannot read your password in plain text;
• Role-based access controls that limit staff access to Personal Data on a strict need-to-know basis;
• Multi-factor authentication required for all internal staff accounts with access to member data;
• Automated intrusion detection and real-time security monitoring systems;
• Regular penetration testing and vulnerability assessments by qualified third-party security firms;
• Secure, geographically redundant data center infrastructure with physical access controls.

While we implement robust security measures, no system is completely immune to risk. In the event of a data breach that poses a risk to your rights and interests, we will notify affected Members and relevant authorities as required by applicable law, without undue delay.

You are responsible for maintaining the security of your own account credentials. Never share your username or password with anyone. If you suspect your account has been compromised, contact us immediately at [email protected].

As a Member of 99jit, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact us at [email protected] with a clear description of your request. We will respond within thirty (30) days of receipt.

Please note that certain rights are subject to limitations. For example, we cannot delete data that we are legally required to retain for AML or financial record-keeping purposes. Where a right cannot be fully exercised, we will explain the reason in our response to your request.

If we become aware that Personal Data has been collected from a person under the age of 21 — whether through registration, gameplay, or any other means — we will take immediate steps to suspend the account, void any bets placed, return any deposits to the original payment source after identity verification, and permanently delete all Personal Data associated with that individual from our systems.

If you are a parent or guardian and believe your child has registered an account on 99jit, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

The 99jit Platform may contain links to third-party websites or services — for example, game provider demo pages or payment network information pages. These third-party sites are not operated by 99jit, and we have no control over their content, privacy practices, or data handling.

This Privacy Policy applies solely to data processed by 99jit in connection with your use of the 99jit Platform. We are not responsible for the privacy practices of any third-party site you navigate to from our Platform. We encourage you to review the privacy policy of any third-party site before submitting personal information to it.

We reserve the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. Where changes are material — meaning they meaningfully affect how we collect, use, or share your Personal Data — we will provide advance notice by posting a prominent notice on the Platform and, where possible, by sending an email notification to your registered email address.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the 99jit Platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you must stop using the Platform and may request account closure by contacting us at [email protected].

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the 99jit Data Privacy team through the following channel:

You may also raise a concern or complaint with your local data protection authority or competent supervisory body if you believe your data rights have not been properly respected. We would, however, appreciate the opportunity to address your concern directly before you escalate to a regulatory body.