Privacy Policy

The following defined terms are used throughout this Privacy Policy. Understanding these definitions will help you interpret your rights and obligations clearly.

• "pr999", "we", "us", and "our" refer to pr999 and its affiliated operating entities that own and operate the Platform accessible at https://pr999.lat.
• "Platform" means the pr999 website, mobile-optimised interface, and all associated gaming products, payment systems, promotional tools, and customer support channels.
• "Player", "you", and "your" refer to any individual who accesses the Platform, registers an account, or interacts with any pr999 service.
• "Personal Data" means any information that identifies or can reasonably identify a living individual, including name, date of birth, Indonesian mobile number, email address, payment account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data — including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data. pr999 is the Data Controller for all Personal Data collected through the Platform.
• "Data Processor" means a third party that Processes Personal Data on behalf of pr999, subject to pr999's instructions and this Privacy Policy.
• "KYC" (Know Your Customer) refers to identity and age verification procedures required to confirm a Player's eligibility before processing withdrawals or as required by our anti-money-laundering obligations.
• "Cookies" means small text files placed on your device by the Platform to maintain session state, remember preferences, and collect anonymised usage analytics.

This Privacy Policy applies to all Personal Data collected by pr999 through the Platform, including data collected during account registration, identity verification, deposits and withdrawals, gameplay, customer support interactions, and participation in promotional activities.

pr999 is the Data Controller responsible for your Personal Data. This means we determine why and how your data is collected and used. Where pr999 engages third-party service providers — such as payment gateways, KYC verification firms, and licensed game studios — those providers act as Data Processors operating under contractual obligations that impose data protection standards equivalent to those in this Policy.

This Policy does not apply to third-party websites or applications that may be linked from pr999 promotional content. pr999 accepts no responsibility for the privacy practices of any third-party site you visit independently of the Platform.

pr999 collects Personal Data through several distinct channels. The categories below describe all data we may collect, along with the source and context of collection.

3.1 Registration Data

When you create a pr999 account, we collect your full legal name, date of birth, Indonesian mobile phone number, email address, and a username of your choice. This information is required to open your account and is verified against the identity documents you provide during KYC.

3.2 Identity Verification (KYC) Data

To comply with age verification and anti-money-laundering requirements, pr999 may request copies of government-issued identity documents — such as your Indonesian KTP (national identity card), passport, or SIM (driver's licence) — together with proof of ownership of the payment account used for deposits. These documents are processed by our KYC partner and stored securely for the retention period set out in Section 9.

3.3 Financial Data

When you make a deposit or request a withdrawal, we collect the bank account name, bank name (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga), account number, or e-wallet identifier (OVO, DANA, GoPay, ShopeePay, LinkAja) associated with your transaction. We do not store full bank account credentials on our servers; payment data is tokenised and handled by our certified payment processor.

3.4 Gameplay & Transaction Data

pr999 records all gameplay activity, including bets placed, games accessed (sportsbook, live casino, slot gacor, togel, Bandar Q, Roulette), session durations, wager amounts, and outcomes. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud prevention.

3.5 Technical & Device Data

We automatically collect certain technical data when you access the Platform, including your IP address, browser type and version, device type and operating system, screen resolution, referring URL, and session timestamps. This data helps us optimise Platform performance, detect suspicious access patterns, and enforce our one-account-per-player policy.

3.6 Communications Data

If you contact our support team via live chat or email at [email protected], we retain a record of that communication — including the content of the message and any attachments — for quality assurance, training, and dispute resolution purposes.

3.7 Promotional & Survey Data

Where you voluntarily participate in promotions, competitions, or player satisfaction surveys, we collect the responses and preferences you provide. Participation is always optional and will not affect your account standing.

pr999 uses your Personal Data for the purposes described in the table below. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected, without first obtaining your explicit consent.

4.1 Marketing Communications

pr999 may send you promotional messages about new games, bonus offers, and platform updates via email or SMS. You may opt out of marketing communications at any time by contacting our support team at [email protected]. Opting out of marketing does not affect your receipt of transactional messages related to your account — such as deposit confirmations, withdrawal notifications, and KYC request emails — which are essential to the operation of your account.

pr999 processes your Personal Data on one or more of the following legal bases:

• Contractual Necessity: Processing is required to perform our contractual obligations to you as a registered player — including account management, payment processing, and dispute resolution. Without this processing, we cannot provide the Platform services.
• Legal Obligation: Processing is necessary to comply with applicable legal and regulatory requirements, including anti-money-laundering (AML) obligations, age verification requirements, and record-keeping mandates.
• Legitimate Interest: Processing serves pr999's legitimate business interests — such as fraud detection, platform security, and service optimisation — provided those interests do not override your fundamental rights and freedoms.
• Consent: Where we rely on your consent as the legal basis — for example, for personalised marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent does not affect your ability to use the Platform.

pr999 does not sell, rent, or trade your Personal Data with third parties for their own commercial purposes. We share Personal Data only in the following limited circumstances:

6.1 Payment Processors

To process your deposits and withdrawals through BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja, we share the minimum necessary financial and identification data with our certified payment processing partners. These partners are contractually prohibited from using your data for any purpose beyond executing the payment transaction.

6.2 KYC & Fraud Prevention Partners

We share identity document data with licensed KYC verification service providers to confirm your identity and age in accordance with our legal obligations. We also share technical and behavioural data with fraud-detection platforms to protect the integrity of the Platform and prevent money laundering and account takeover.

6.3 Game Studio Providers

Licensed game studios — including Pragmatic Play, Evolution Gaming, Pocket Games Soft, NetEnt, Microgaming, and Spribe — receive anonymised session identifiers and gameplay parameters necessary to deliver their games within the Platform. These studios do not receive your full registration or financial data.

6.4 Legal & Regulatory Disclosure

pr999 may disclose your Personal Data to law enforcement authorities, regulatory bodies, or courts of competent jurisdiction where required by applicable law, a valid court order, or a lawful regulatory request. In such cases, pr999 will disclose only the minimum data necessary to satisfy the legal requirement and, where permitted, will notify you of the disclosure.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of pr999's business, your Personal Data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity before the transfer takes effect.

pr999 uses cookies and similar tracking technologies to ensure the Platform functions correctly and to improve your experience as a player. The following categories of cookies are used on the Platform:

7.1 Strictly Necessary Cookies

These cookies are essential for the Platform to operate. They maintain your login session, remember your language and currency preferences, and enable core security functions such as CSRF protection. You cannot opt out of strictly necessary cookies while continuing to use the Platform.

7.2 Performance & Analytics Cookies

These cookies collect anonymised information about how Players use the Platform — such as which pages are visited most frequently, how long sessions last, and which devices are used. This data helps pr999 identify areas for improvement and optimise Platform performance for players across Jakarta, Surabaya, Medan, Bandung, Bali, and all regions of Indonesia.

7.3 Functional Cookies

Functional cookies remember choices you make on the Platform — such as recently viewed game categories, preferred deposit methods, and notification settings — so that you do not need to reconfigure them each time you log in.

7.4 Managing Cookies

You may configure your browser to block or delete cookies at any time. Note that blocking strictly necessary cookies will prevent you from logging in to your account and using core Platform features. Blocking performance or functional cookies will not prevent access but may degrade your experience. Instructions for managing cookies are available in the help documentation for all major browsers.

pr999 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and pr999's servers is encrypted using industry-standard TLS 1.2 or higher protocols.
• Encryption at Rest: Sensitive Personal Data stored on pr999's infrastructure — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted to pr999 staff and authorised Data Processors who have a documented need-to-know basis. All access is logged and subject to regular audit review.
• Penetration Testing: pr999's Platform infrastructure undergoes regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: pr999 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify affected Players without undue delay and take immediate steps to contain the breach.
• Employee Training: All pr999 staff who handle Personal Data receive regular training on data protection obligations and security best practices.

pr999 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected or as required by applicable law. The retention schedule below outlines our standard retention periods by data category:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be associated with any identifiable individual. Where anonymisation is used in lieu of deletion, the resulting anonymised dataset may be retained indefinitely for statistical and analytical purposes.

As a pr999 player, you have the following rights in respect of your Personal Data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and respond in full within 30 days.

10.1 Right of Access

You have the right to request a copy of all Personal Data pr999 holds about you, together with information about the purposes for which it is processed, the categories of data held, and the third parties with whom it has been shared. This is commonly referred to as a Subject Access Request (SAR).

10.2 Right to Rectification

If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account-level data such as your registered mobile number or email address, updates can be made directly through the account settings panel.

10.3 Right to Erasure

You have the right to request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been processed unlawfully. Note that pr999 may be required to retain certain data beyond your request for erasure in order to comply with AML record-keeping obligations — in such cases, we will inform you of the extent to which your request can be fulfilled.

10.4 Right to Restriction of Processing

You have the right to request that pr999 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or while you await the outcome of an objection to processing based on legitimate interests.

10.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format and to request that it be transmitted directly to another data controller where technically feasible.

10.6 Right to Object

You have the right to object at any time to the processing of your Personal Data for direct marketing purposes — including profiling carried out for marketing analysis. You may also object to processing based on legitimate interests, though pr999 may continue processing where it can demonstrate compelling legitimate grounds that override your interests.

10.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

The pr999 Platform is strictly intended for adults aged 21 years or older. pr999 does not knowingly collect Personal Data from any person under the age of 21. Account registration requires confirmation that the applicant meets the minimum age requirement, and age verification is enforced through KYC procedures.

If pr999 becomes aware that Personal Data has been collected from an individual under the age of 21 without verified parental or guardian consent, all associated data will be deleted immediately and the account closed. If you believe a minor has registered an account on the Platform, please contact our support team at [email protected] immediately so that appropriate action can be taken without delay.

pr999 operates internationally and may transfer your Personal Data to servers and Data Processors located outside of Indonesia. Such transfers are necessary to deliver the Platform's services — for example, game studio servers operated by Pragmatic Play, Evolution Gaming, and other licensed providers may be located in jurisdictions outside Indonesia.

Where Personal Data is transferred internationally, pr999 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Privacy Policy. These safeguards include contractual data protection clauses incorporated into all agreements with international Data Processors, requiring them to maintain security and confidentiality standards consistent with this Policy.

By registering an account and using the Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia in accordance with this Section.

pr999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform services. The "Last Updated" date at the top of this page will always indicate the date of the most recent revision.

Where changes are material — such as a new category of data being collected, a new purpose for processing, or a new category of third-party recipient — pr999 will notify registered Players via a prominent notice on the Platform homepage or, where a verified email address is held, by direct email notification, at least 7 days before the change takes effect.

For minor, non-substantive changes — such as typographical corrections or clarifications that do not alter your rights — pr999 may update this Policy without prior notice. Your continued use of the Platform after any update constitutes your acceptance of the revised Privacy Policy. If you do not accept a material change, you should close your account before the effective date of that change.

If you have any questions, concerns, or requests in relation to this Privacy Policy or pr999's data protection practices, please contact our dedicated data privacy team through any of the following channels:

• Live Chat: Available 24/7 via the chat widget on the Platform — the fastest channel for general privacy queries and data rights requests.
• Email: support@pr999.lat — for formal written data rights requests (Subject Access Requests, erasure requests, objections to processing) and KYC documentation queries. Please use the subject line "Data Rights Request" to ensure your message is directed to the correct team. We aim to acknowledge all email inquiries within 5 business days.

When submitting a data rights request, please include your registered username and the mobile number associated with your pr999 account so that our team can locate your records and verify your identity without delay.