Your privacy matters to us. This Privacy Policy explains exactly what personal data 999sl collects, why we collect it, how we use and protect it, and the rights you hold as an Indonesian player and platform member.
Summary: 999sl collects only the personal data necessary to operate a secure, compliant, and enjoyable gaming platform for Indonesian members. We do not sell your data, and we do not use it for purposes beyond those described in this policy. If you have any questions, contact us at [email protected].
The following definitions apply throughout this Privacy Policy.
| Term | Meaning |
|---|---|
| "999sl" / "We" / "Us" | The operator of the 999sl online gaming platform accessible at 999sl.asia. |
| "You" / "Member" | Any individual who registers an account, visits, or otherwise interacts with the 999sl platform. |
| "Personal Data" | Any information that identifies or could reasonably be used to identify you as a natural person — including your name, date of birth, Indonesian national identity number, contact details, IP address, and payment account details. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion. |
| "Data Controller" | The entity that determines the purposes and means of Processing Personal Data — in this case, 999sl. |
| "Third-Party Processor" | An external company that Processes Personal Data on behalf of 999sl under a data processing agreement, such as a payment gateway, KYC verification provider, or cloud infrastructure provider. |
| "KYC" | Know Your Customer — the identity, age, and source-of-funds verification process required for regulatory compliance. |
| "Cookies" | Small text files placed on your device by the 999sl platform to support session management, analytics, and personalization. |
999sl collects the following categories of Personal Data in the course of operating the platform and providing Services to Indonesian members.
The majority of Personal Data 999sl holds is provided directly by you during account registration, KYC verification, deposits and withdrawals, bonus claim submissions, and when you contact our customer support team.
When you access 999sl.asia, our servers automatically record technical and device data, including your IP address, browser fingerprint, session activity, and page interaction patterns. This data is captured via server logs and first-party cookies.
To fulfil our KYC and anti-money laundering (AML) obligations, 999sl may receive identity verification results from licensed third-party KYC providers. These providers confirm the authenticity of identity documents and cross-reference sanctions and politically exposed persons (PEP) databases. The result — a pass, fail, or pending status — is stored against your 999sl Account record.
When you initiate a deposit or withdrawal via a local bank transfer or e-wallet, the relevant payment processor (for example, OVO, DANA, or your BCA/BRI internet banking gateway) returns transaction confirmation data to 999sl. We do not receive or store your full banking credentials — only the transaction reference, amount in IDR, and confirmation status.
999sl processes your Personal Data only for the specific purposes listed below. We do not process Personal Data in ways that are incompatible with these stated purposes.
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Identity, contact, account activity data |
| Age and identity verification (KYC) | Identity data, KYC documents |
| Processing deposits and withdrawals in IDR | Financial data, identity data |
| Anti-money laundering (AML) monitoring | Financial data, account activity data |
| Fraud detection and prevention | Technical data, account activity data, financial data |
| Responsible gaming monitoring | Account activity data, contact data |
| Customer support | Identity data, contact data, account activity data |
| Platform performance and analytics | Technical data, device data, anonymized activity data |
| Promotional and bonus communications | Contact data, account activity data (opt-in basis only) |
| Legal and regulatory compliance | All categories, as required by applicable law |
999sl relies on the following legal bases when Processing your Personal Data:
999sl shares Personal Data with carefully selected third-party processors only to the extent necessary to operate the platform. All processors are bound by contractual data processing agreements that restrict their use of your data to the specific services they provide to 999sl. Categories of processor include:
999sl may be legally required to disclose Personal Data to regulatory authorities, law enforcement agencies, or courts in response to a lawful request, court order, or applicable legal obligation. In such cases, we will disclose the minimum data required and, where legally permitted, will notify you of the disclosure.
We do not sell, rent, or trade your Personal Data to any third party for their own marketing or commercial purposes. Your data is used exclusively to operate the 999sl platform and to fulfill our legal obligations. This commitment applies without exception.
In the event of a merger, acquisition, or sale of all or part of the 999sl business, Personal Data held by 999sl may be transferred to the acquiring entity. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it, with no less than 30 days' advance notice.
999sl retains Personal Data for as long as your Account is active and for a defined period after Account closure, as required by applicable KYC/AML regulations and our licensing obligations.
| Data Category | Retention Period |
|---|---|
| Account identity and KYC documents | 5 years from the date of Account closure |
| Transaction records (deposits, withdrawals in IDR) | 5 years from the date of each transaction |
| Betting and gaming history | 3 years from the date of each activity |
| Customer support correspondence | 3 years from the date of the interaction |
| Server logs and technical data | 12 months from the date of capture |
| Marketing consent records | Until consent is withdrawn, plus 2 years thereafter |
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized so that it can no longer be linked to any individual.
999sl applies a layered security architecture to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. Our key security controls include:
Your Role in Security: 999sl's technical measures are only one layer of protection. You should use a strong, unique password for your 999sl Account, enable 2FA, and never share your login credentials with anyone. If you suspect unauthorized access to your Account, contact [email protected] immediately.
Cookies are small text files stored on your device when you visit 999sl.asia. They allow the platform to recognize your browser, maintain your session, remember your preferences, and collect aggregate analytics data.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens | No — required for the platform to function |
| Functional | Remembering your language and display preferences | Yes — via browser settings |
| Analytics | Aggregate traffic and usage data to improve platform performance | Yes — via browser settings |
| Marketing | Tracking referral source for affiliate and bonus attribution | Yes — via browser settings or Account preferences |
You can manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your 999sl Account and using the platform's core features. Instructions for managing cookies are available in the help documentation of all major browsers.
As a 999sl Member and a data subject, you hold the following rights with respect to your Personal Data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid request.
Request a copy of all Personal Data 999sl holds about you, along with information on how it is being used.
Request correction of inaccurate or incomplete Personal Data held in your 999sl Account record.
Request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
Request that we temporarily restrict processing of your data while a dispute or verification is pending.
Request a machine-readable export of the Personal Data you provided to 999sl directly (e.g., account profile data and transaction history).
Object to processing based on legitimate interests, including the right to opt out of marketing communications at any time.
Please note that some requests — particularly erasure requests — may be subject to our legal data retention obligations under KYC/AML regulations. Where we are unable to fulfill a request in full, we will explain the reasons in our response.
The 999sl platform is strictly prohibited for use by individuals under the age of 21. 21+ We do not knowingly collect Personal Data from anyone under 21 years of age. If we discover that Personal Data has been collected from a person under 21, we will immediately suspend the associated Account, delete the data, and return any deposited funds to the originating payment method after identity verification.
If you are a parent or guardian and believe that a minor has created an account on 999sl without your consent, please contact us immediately at [email protected] with the subject line "Minor Account Report". We treat all such reports as high-priority and will investigate within 24 hours.
999sl may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify all registered Members by email at least 14 days before the updated Policy takes effect. The "Last Updated" date at the top of this document will be revised accordingly.
Continued use of the 999sl platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you may close your Account by contacting the support team before the effective date; we will process any remaining real-money Balance in accordance with the withdrawal procedures in our Terms & Conditions.
Stay Informed: We recommend reviewing this Privacy Policy periodically, even if you have not received a notification. The current version is always accessible via the footer of every page on 999sl.asia.
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 999sl handles your Personal Data, please contact our Data Protection Officer (DPO) using the details below.
Data Protection Officer — 999sl
Email: [email protected]
Subject line: Privacy / DPO Inquiry
Response time: within 5 business days for standard inquiries; within 48 hours for urgent data breach or minor-related reports.
Support hours: 24 hours a day, 7 days a week, including Indonesian national holidays (Idul Fitri, Nyepi, Indonesian Independence Day, and all gazetted public holidays).
For general account and payment support, the 999sl customer service team — staffed by native Indonesian-speaking agents — is available around the clock via live chat on the platform and via email at the address above.
Related Policies: This Privacy Policy should be read alongside the 999sl Terms & Conditions and our Responsible Gaming policy, both of which contain additional information relevant to your rights and obligations as a Member.
Privacy at a Glance
Every byte of data exchanged between your browser and 999sl servers is protected by industry-standard 256-bit TLS encryption — the same technology used by global banks and financial institutions.
999sl does not sell, rent, or trade your Personal Data to any third party. Your information is used exclusively to run the platform, process your IDR transactions, and comply with our legal obligations.
Our Know Your Customer process collects only what is legally required — a valid Indonesian ID (KTP or passport) and proof of address. Documents are processed by licensed KYC providers and stored encrypted.
Deposit and withdrawal data for BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other Indonesian payment methods is handled via encrypted channels. 999sl stores only masked account references — never your full banking credentials.
As a 999sl Member, you hold the rights to access, correct, export, restrict, and delete your Personal Data. Submit any data rights request by email and receive a full response within 30 days.
999sl never knowingly collects data from individuals under 21. Any Account found to belong to a minor is immediately suspended, data is deleted, and funds are returned. Report concerns to [email protected]. 21+
Your Privacy Is Secure — Now Play
With your data protected by SSL encryption and a strict no-sell policy, you can enjoy sports betting, live casino, and slots with confidence. Open your free account today — adults only. 21+