Privacy Policy — abg99

1. Overview

abg99 operates abg99.asia, an international online casino and sportsbook platform serving players in Indonesia. We offer a broad range of products including football betting (covering BRI Liga 1, EPL, La Liga, Serie A, Bundesliga, and international competitions), live casino games, slot games, togel (Indonesia's traditional numbers lottery), and sabung ayam (live cockfighting). The personal data of every registered player is processed by abg99 in the course of delivering these services.

This Privacy Policy applies to all personal data that abg99 collects and processes through the abg99.asia website, our customer support channels, and any associated communications. It covers players based in Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, and across Indonesia. It does not apply to third-party websites or services that may be linked from our platform.

By registering an account with abg99 or by continuing to use the abg99.asia platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not register an account or use the platform.

2. Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal data is abg99, operating the platform at abg99.asia under an international gaming licence. abg99 determines the purposes and means of processing personal data collected through the platform.

All queries relating to this Privacy Policy, requests to exercise your data rights, or complaints regarding abg99's handling of your personal data should be directed to our designated Privacy Contact at:

3. Personal Data We Collect

abg99 collects the following categories of personal data. We collect only what is necessary for the stated purpose and do not retain data beyond its useful life.

3.1 Registration & Identity Data

When you create an abg99 account, we collect your full legal name, date of birth, residential address in Indonesia, email address, and the username and hashed password you choose. This data is required to open and maintain your account.

3.2 KYC Verification Data

To comply with our international licensing obligations and to prevent identity fraud, we collect government-issued identity documents — typically an Indonesian National ID Card (KTP) or valid passport — together with a selfie photograph holding the document. We may also collect proof of your payment method ownership (for example, a screenshot of your OVO, DANA, or mobile banking profile confirming that the registered name matches your abg99 account name).

3.3 Financial & Transaction Data

We collect records of all deposits, withdrawals, wagers, and bonus claims processed through your account. This includes transaction amounts in Indonesian Rupiah (IDR / Rp), timestamps, payment method identifiers (e.g., the last four digits of a bank account or e-wallet reference), and transaction status. We do not store full bank account numbers or full card numbers on our systems.

3.4 Usage & Behavioural Data

We automatically collect data about how you interact with the abg99 platform, including pages visited, game sessions started and completed, bet history, session duration, device type, browser type and version, operating system, and Internet Protocol (IP) address. This data is used for platform analytics, fraud prevention, and personalisation of your gaming experience.

3.5 Communications Data

When you contact abg99 support via live chat, email, or any other channel, we collect and retain records of those communications — including your messages, timestamps, and any attachments you provide — for quality assurance, dispute resolution, and regulatory compliance purposes.

3.6 Responsible Gaming Data

If you voluntarily use abg99's responsible gaming tools — such as deposit limits, loss limits, session time limits, cool-off periods, or self-exclusion — we collect and store your preferences and the dates on which those restrictions were applied or modified. This data is retained for the duration of any active restriction and beyond if required by our licensing obligations.

4. How We Collect Your Data

abg99 collects personal data through the following means:

• Directly from you — when you register an account, submit KYC documents, make a deposit or withdrawal request, contact customer support, or update your account profile.
• Automatically — when you browse or interact with the abg99.asia platform, our servers and analytics tools automatically record usage data including IP address, session data, and device information via cookies and similar technologies (see Section 8).
• From payment processors — when you initiate a deposit or withdrawal via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, Bank Danamon, OVO, DANA, GoPay, ShopeePay, or LinkAja, our payment processing partners transmit transaction confirmation data to abg99 to reconcile your account balance.
• From identity verification providers — abg99 may use third-party KYC verification service providers to cross-reference the identity documents you submit against public registers. These providers transmit a verification result (pass/fail) and any supporting flags to abg99.
• From fraud prevention services — abg99 uses automated tools to detect unusual account activity, duplicate account creation, and suspicious payment patterns. These tools may process certain account and device identifiers to generate a risk score.

5. Legal Basis for Processing

abg99 processes your personal data on the following legal grounds:

• Contractual necessity: The majority of the data processing described in this Policy is necessary to perform the contract between you and abg99 — specifically, to create and manage your account, process deposits and withdrawals, settle wagers, and provide customer support. Without this processing, we cannot operate your account.
• Legal obligation: abg99 is required by its international gaming licence to collect and retain identity verification data, transaction records, and responsible gaming records for specified minimum periods. This processing is mandatory and cannot be opted out of.
• Legitimate interests: abg99 processes certain usage and behavioural data under its legitimate interest in maintaining platform security, preventing fraud, improving the user experience, and ensuring the integrity of its games. We apply a balancing test and do not process data under this basis where your privacy interests outweigh our legitimate interests.
• Consent: Where we send you optional marketing communications (such as promotional emails about new bonuses, seasonal offers tied to Idul Fitri, Ramadhan, or Indonesian Independence Day, or new game launches), we do so only on the basis of your explicit, freely given consent. You may withdraw this consent at any time by clicking "Unsubscribe" in any promotional email or by contacting [email protected].

6. How We Use Your Personal Data

abg99 uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and closing your abg99 account; authenticating your identity each time you log in; applying account-level settings such as preferred language, currency display, and responsible gaming limits.
• KYC and age verification: Verifying that you are at least 21 years of age and that the identity you have provided is genuine. abg99 enforces a strict 21+ policy across all products and will not knowingly maintain accounts belonging to persons under 21.
• Payment processing: Processing deposit and withdrawal requests via your chosen Indonesian payment method; reconciling your account balance after each transaction; investigating disputed or failed transactions.
• Platform operations: Delivering game content, settling wagers across our Sportsbook (including mix parlay accumulators and Asian handicap / voor bola markets), live casino, and slot products; processing bonus credits and enforcing wagering requirements.
• Security and fraud prevention: Detecting and preventing unauthorised account access, duplicate account creation, money laundering, and other forms of prohibited conduct described in our Terms & Conditions.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling; applying deposit limits, cool-off periods, and self-exclusion orders; responding to third-party exclusion requests from recognised responsible gaming bodies.
• Customer support: Responding to your queries, resolving disputes, and maintaining records of our communications for quality assurance and regulatory audit purposes.
• Legal compliance: Retaining records required by our licensing authority; responding to lawful requests from regulatory or law enforcement bodies; defending or pursuing legal claims.
• Platform improvement: Analysing aggregated usage data to improve the design, performance, and content of the abg99.asia platform.
• Marketing (consent only): Sending promotional communications about new products, bonuses, and seasonal offers — only where you have provided explicit consent and have not subsequently withdrawn it.

7. How We Share Your Data

abg99 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the limited circumstances set out below, and only to the extent necessary for the stated purpose.

7.1 Service Providers

abg99 engages trusted third-party service providers who process personal data on our behalf and under our instruction. These include: payment processing partners (e.g., banking APIs for BCA, BRI, BNI, Mandiri, and e-wallet providers for OVO, DANA, GoPay, ShopeePay, LinkAja); KYC and identity verification providers; fraud detection and risk scoring platforms; game studios supplying certified content to the abg99 platform (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft); cloud hosting and infrastructure providers; and customer support tooling providers. All service providers are bound by data processing agreements that restrict their use of your data to the specific service they are providing for abg99.

7.2 Regulatory & Legal Bodies

abg99 may disclose personal data to its licensing authority, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction where required to do so by law, by court order, or as necessary to protect the legal rights and interests of abg99 or other players on the platform.

7.3 Business Transfers

In the event that abg99 undergoes a merger, acquisition, restructuring, or sale of all or a material part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players by email prior to any such transfer and will ensure that any successor entity is bound by privacy obligations no less protective than those in this Policy.

7.4 Responsible Gaming Partners

Where a player has registered with a recognised responsible gaming self-exclusion scheme and that scheme notifies abg99, we will process the player's data for the purpose of applying and enforcing the exclusion. abg99 does not share player data with responsible gaming bodies unprompted.

8. Cookies & Tracking Technologies

abg99 uses cookies and similar technologies (such as local storage tokens and session identifiers) to operate the platform correctly, maintain your authenticated session, and collect aggregated usage analytics. We do not use third-party advertising cookies or behavioural retargeting technologies.

8.1 Essential Cookies

These cookies are strictly necessary for the platform to function. They maintain your login session, store your language and display preferences, and ensure that the platform responds correctly to your actions. You cannot opt out of essential cookies without disabling JavaScript entirely, which would render the platform non-functional.

8.2 Analytics Cookies

abg99 uses first-party analytics tools to understand how players navigate the platform — which pages are most visited, where sessions end, and how players move between game categories. This data is aggregated and anonymised before analysis; it is not used to identify individual players. You may opt out of analytics cookies by adjusting your browser settings.

8.3 Security Cookies

Certain cookies are used to detect and prevent fraudulent activity, including CSRF (cross-site request forgery) tokens, device fingerprint tokens, and login anomaly detection identifiers. These are classified as essential and cannot be disabled.

8.4 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling non-essential cookies will not affect your ability to use the core abg99 platform. For instructions on managing cookies in your specific browser, refer to your browser provider's help documentation.

9. Data Retention

abg99 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, to comply with our legal and regulatory obligations, or to defend legal claims. The following indicative retention periods apply:

• Account registration data and KYC documents: Retained for the lifetime of your account and for a minimum of five (5) years after account closure, as required by our licensing obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, consistent with international anti-money-laundering standards.
• Bet history and game session logs: Retained for three (3) years from the date of each session, used for dispute resolution and regulatory audit purposes.
• Customer support communications: Retained for three (3) years from the date of the final communication in each support thread.
• Responsible gaming records: Retained for the duration of any active restriction plus five (5) years after the restriction expires, to prevent circumvention of self-exclusion orders.
• Marketing consent records: Retained from the date of consent until the earlier of: (a) withdrawal of consent; or (b) three (3) years from the date on which the last marketing communication was sent.
• Usage and analytics data: Retained in anonymised, aggregated form for up to three (3) years. Individual-level raw usage logs are retained for twelve (12) months.

When data reaches the end of its applicable retention period, abg99 will securely delete or permanently anonymise it so that it can no longer be attributed to any individual.

10. Security Measures

abg99 implements a layered information security programme designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key technical and organisational measures include:

• 256-bit TLS encryption on all connections between your browser and abg99.asia — ensuring that data in transit cannot be intercepted.
• One-way password hashing using a computationally intensive algorithm — abg99 staff cannot view your password in plain text under any circumstances.
• Access controls — personal data is accessible only to abg99 staff whose role requires access to it. Role-based access controls are reviewed quarterly.
• Encrypted storage — KYC documents and financial records are stored in encrypted form at rest in access-controlled infrastructure.
• Login anomaly detection — automated systems monitor login attempts and flag unusual patterns (such as access from a new country or device) for review.
• Regular security audits — abg99 conducts periodic penetration testing and vulnerability assessments of the abg99.asia platform.
• Incident response plan — in the event of a data breach that is likely to result in a high risk to your rights and freedoms, abg99 will notify affected players without undue delay.

While abg99 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are also responsible for keeping your own account credentials secure — see Clause 4 of our Terms & Conditions for your obligations in this regard.

11. Your Data Rights

abg99 respects your right to control your own personal data. Depending on applicable law, you may be entitled to exercise the following rights. To exercise any of these rights, contact us at [email protected] with "Privacy Request" in the subject line.

abg99 will respond to all data rights requests within 14 business days of receipt. In complex cases, we may extend this by a further 14 days; we will notify you if an extension is necessary. Some rights may be subject to limitations where abg99 is required to retain data by law or where processing is necessary to defend a legal claim.

12. Minors & Age Restriction

The abg99 platform is strictly intended for adults aged 21 years and above. abg99 does not knowingly collect personal data from any person under the age of 21. All account registrations are subject to mandatory age verification as part of our KYC process.

If abg99 discovers or is notified that a person under 21 has created an account and provided personal data, we will: (a) immediately suspend and permanently close the account; (b) reverse any financial transactions associated with the account to the extent possible; (c) securely delete all personal data collected from the minor, except where retention is required for legal or regulatory purposes; and (d) report the matter to the relevant authorities where required.

If you are the parent or guardian of a person under 21 and believe that they may have registered on abg99 without your knowledge, please contact us immediately at [email protected]. We take underage access extremely seriously and will investigate and respond within 24 hours.

13. Cross-Border Data Transfers

abg99 operates under an international gaming licence and may engage service providers located outside Indonesia for purposes such as cloud hosting, fraud detection, and KYC verification. As a result, your personal data may be transferred to and processed in countries other than Indonesia.

Where personal data is transferred to a third country, abg99 takes appropriate measures to ensure that such transfers are lawful and that your data receives an equivalent level of protection to that afforded within Indonesia. These measures include: requiring service providers to execute data processing agreements incorporating internationally recognised data transfer safeguards; selecting cloud infrastructure located in jurisdictions with adequate data protection frameworks; and conducting due diligence on all third-party processors before engagement.

14. Third-Party Links & Integrations

The abg99.asia platform may display content or links from third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) delivered within embedded iframes or via API integrations. These studios operate their own data processing activities in connection with the delivery of game content. abg99 is responsible for the personal data processed by our platform; the studios are responsible for any data they process independently as part of their certified RNG and game delivery systems.

abg99 does not include links to external third-party websites within the main navigation or body content of abg99.asia. If you navigate away from abg99.asia to any external site, the privacy policy of that site will govern the processing of your data, and abg99 accepts no responsibility for the data practices of third-party sites.

15. Changes to This Privacy Policy

abg99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or our gaming licence requirements. When we make material changes to this Policy, we will notify all registered players by email to the address on their account at least 14 days before the amended Policy takes effect, and we will display a prominent notice on the abg99.asia platform.

Non-material changes — such as typographical corrections or minor clarifications that do not substantively alter your rights or our obligations — may be made without prior notice. The "Last Updated" date at the top of this page will always reflect when the Policy was most recently changed.

Your continued use of the abg99 platform after the effective date of any revised Privacy Policy constitutes your acceptance of those changes. If you do not agree with the revised Policy, you must stop using the platform and request account closure before the effective date.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or abg99's handling of your personal data, please reach out through the following channel:

abg99 does not provide telephone support. Please do not send sensitive identity documents via email. All KYC document uploads should be made through the secure upload tool within your abg99 account dashboard.