Privacy Policy — 9999t Data Commitment

This Privacy Policy applies to all personal data processed by 9999t in connection with the operation of its online gaming platform at https://9999t.net (the "Platform"), including all associated sub-domains, mobile interfaces, customer support channels, and promotional communications.

The data controller responsible for your personal data is the internationally incorporated entity that operates 9999t under its applicable gaming licence. When this Policy refers to "9999t", "we", "us", or "our", it refers to that entity acting as data controller. All queries and data subject requests should be directed to [email protected].

By registering an Account on 9999t, depositing funds, or otherwise interacting with the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the Platform.

9999t collects personal data through several channels: directly from you when you register and use the Platform; automatically through your device and browser as you navigate the site; and from third-party service providers who assist us in operating the Platform. The categories of data we collect are set out below.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where a player voluntarily discloses such information in the context of a responsible gaming assessment or a self-exclusion request, in which case the disclosure is treated with the highest level of confidentiality.

9999t processes your personal data on one or more of the following legal bases, depending on the specific purpose of each processing activity:

• Contractual Necessity: Processing required to register your Account, verify your identity (KYC), process deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or other supported channels, and deliver gaming services is necessary for the performance of our contract with you as set out in the Terms & Conditions.
• Legal Obligation: Processing required to comply with anti-money laundering (AML) obligations, financial record-keeping requirements, licensing authority reporting obligations, and responses to lawful requests from regulatory or law enforcement bodies.
• Legitimate Interests: Processing for fraud prevention, platform security, abuse detection, analytics to improve the Platform, and internal business reporting — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications (promotional emails, SMS bonus alerts, seasonal offer notifications tied to Indonesian occasions such as Idul Fitri, Ramadhan, and Chinese New Year / Imlek) where you have explicitly opted in. You may withdraw consent at any time by contacting [email protected] or using the unsubscribe link in any marketing email.

9999t uses personal data for clearly defined operational and compliance purposes. We do not use your data for any purpose incompatible with the purposes listed at the time of collection. Primary uses include:

• Account Management: Creating and maintaining your 9999t player account, verifying your age (21+) and identity, updating account details upon your request, and managing account security including two-factor authentication.
• Transaction Processing: Facilitating deposits and withdrawals in Indonesian Rupiah (IDR / Rp) via your selected payment method, detecting and preventing payment fraud, and maintaining accurate financial records of all transactions.
• KYC Compliance: Verifying your identity documents (KTP, passport, or SIM) as required before withdrawal processing and upon reaching specified deposit thresholds, and maintaining records of verification outcomes as required by our licensing authority.
• Personalisation: Tailoring promotional offers, game recommendations, and bonus eligibility to your demonstrated preferences on the Platform — for example, surfacing relevant slot gacor (high-payout slot) promotions if your gaming history is predominantly in the slots category.
• Customer Support: Responding to your queries, resolving disputes, processing responsible gaming requests (deposit limits, self-exclusion, cooling-off periods), and improving the quality of our support interactions.
• Security & Fraud Prevention: Detecting and investigating suspicious account behaviour, preventing the creation of multiple accounts, identifying and blocking bonus abuse patterns, and protecting the integrity of sportsbook markets including BRI Liga 1, EPL, and international fixtures.
• Legal & Regulatory Compliance: Meeting our obligations under our gaming licence, responding to regulatory audits, and fulfilling any legally required reporting to competent authorities.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve site navigation, game loading performance, mobile interface usability, and the overall player experience on 9999t.

9999t shares personal data with the following categories of third-party recipients, each bound by appropriate data processing agreements and confidentiality obligations:

• Game Providers: Certified studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive necessary session tokens and player identifiers to deliver game content and record outcomes. They do not receive your full identity or financial data.
• Payment Processors: Our payment infrastructure partners who facilitate transactions via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja receive the financial data strictly necessary to complete each transaction. Full bank account numbers are never stored by 9999t itself.
• KYC & Identity Verification Services: Accredited third-party identity verification providers receive copies of identity documents submitted for KYC purposes, solely for the purpose of verifying authenticity and confirming the player's age and identity.
• Cloud Infrastructure & Hosting Providers: Our Platform is hosted on internationally recognised cloud infrastructure. These providers process data only on our instructions and are contractually bound to maintain the security of all data stored or transmitted via their systems.
• Regulatory & Law Enforcement Bodies: 9999t will disclose personal data to licensing authorities, financial intelligence units, or law enforcement agencies where required to do so by law, by a valid court order, or in connection with an active anti-money laundering investigation.
• Professional Advisors: Lawyers, auditors, and compliance consultants engaged by 9999t who require access to personal data in the course of providing their professional services, subject to strict professional confidentiality obligations.

9999t uses cookies and similar tracking technologies to operate the Platform, maintain session state, prevent fraud, and improve the user experience. A summary of the cookie categories we use is provided below:

9999t does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair core Platform functionality including login and payment processing.

9999t implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in operation include:

• Encryption in Transit: All data transmitted between your device and 9999t's servers is protected by 256-bit SSL/TLS encryption. Our Platform maintains an A-grade SSL configuration.
• Encryption at Rest: Sensitive personal data and financial records stored in our databases are encrypted at rest using industry-standard AES-256 encryption.
• Access Controls: Access to personal data within 9999t's systems is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication for all administrative access.
• Penetration Testing: 9999t engages independent security firms to conduct regular penetration testing and vulnerability assessments of the Platform. Critical findings are remediated within defined service level timescales.
• Incident Response: 9999t maintains a documented data breach incident response plan. In the event of a breach that poses a material risk to players, affected players will be notified without undue delay, with clear guidance on any protective actions they should take.
• Two-Factor Authentication: 9999t offers and strongly encourages the use of two-factor authentication (2FA) via SMS to your registered Indonesian mobile number for all account login and withdrawal confirmation events.

9999t retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our retention schedule is as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data (which can no longer be linked to any individual) may be retained indefinitely for statistical analysis and Platform improvement purposes.

9999t recognises and respects your rights in relation to your personal data. To exercise any of the rights described below, please contact us at [email protected] with a clear description of your request and sufficient information to verify your identity. We will respond within thirty (30) calendar days of receiving a valid request.

9999t will not charge a fee for processing data subject requests unless a request is manifestly unfounded, excessive, or repetitive. In such cases, a reasonable administrative fee may be applied or the request refused, with written reasons provided. Where 9999t cannot action a request due to a conflicting legal obligation (for example, a mandatory AML retention requirement), we will explain the specific legal basis for the limitation.

If 9999t discovers or is notified that personal data has been collected from a person under 21 years of age, the relevant Account will be immediately suspended, all associated data will be quarantined pending investigation, and any deposited funds will be returned to the originating payment method after identity verification. The data will then be permanently deleted from our systems.

If you are a parent or guardian and believe your child may have registered an Account on 9999t, please contact us immediately at [email protected]. We will treat the matter with urgency and full confidentiality.

As an internationally operated platform serving Indonesian players, 9999t may transfer personal data to, and process it in, countries outside Indonesia. These may include the jurisdiction in which our primary licensing authority is located and the countries in which our cloud infrastructure providers, game studios, and KYC service partners are established.

Whenever personal data is transferred internationally, 9999t ensures that an adequate level of protection is maintained through one or more of the following safeguards:

• Transfer to a country recognised as providing adequate data protection by relevant international standards.
• Use of standard contractual clauses incorporating appropriate data protection obligations with the recipient entity.
• Reliance on the recipient's binding corporate rules, where the recipient is part of an internationally certified group with group-wide data protection policies.
• Where none of the above is applicable, reliance on the necessity of the transfer for the performance of our contract with you (for example, routing a GoPay transaction through the relevant payment network).

You may request further information about the specific safeguards in place for any particular international transfer by contacting us at [email protected].

9999t reserves the right to update this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, licensing requirements, or Platform functionality. The current version of this Policy will always be accessible at https://9999t.net/privacy-policy and will display the "Last Updated" date and version number at the top of the document.

For material changes — defined as modifications that meaningfully affect how we collect, use, or share your personal data, or that affect your rights as a data subject — 9999t will provide at least fourteen (14) days' advance notice by displaying a prominent notice on the Platform and, where practicable, by sending an email to the registered email address on file for each active Account.

Your continued use of the Platform following the effective date of a revised Privacy Policy constitutes your acknowledgment of the revised terms. If you do not accept a material change to this Policy, you may close your Account as described in the Terms & Conditions, after which your personal data will be handled in accordance with the retention schedule in Clause 8 above.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 9999t handles your personal data, please contact us using the details below. We are committed to resolving all data privacy queries promptly and transparently.

If you are not satisfied with 9999t's response to a privacy query or data subject request, you have the right to escalate your complaint to the supervisory authority in the jurisdiction in which 9999t holds its primary gaming licence. Details of the relevant supervisory authority will be provided upon request.