luck99 Platform Privacy Notice

This page describes what we collect when you use luck99 and how we keep that data protected. We collect personal information—your email, phone number, identity document, and payment details—only when you create your account and submit your KYC verification on your mobile device. We use this information to confirm your identity, process your deposits via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, and handle your withdrawals. We also track your account activity to detect unusual transactions and protect against fraud.

Our servers and data storage are encrypted. When you log into luck99 on your phone or browser, all communication between your device and our platform uses TLS 1.2 encryption—the same standard banks use. Your password is hashed before reaching our servers, so we never store it in plain text. Your personal identity data is stored separately from your play history and betting records, so no single breach exposes both categories simultaneously. We retain your data for as long as you maintain your account and for a period after closure as required by law.

We operate under jurisdiction-restricted conditions and serve only supported Indonesian regions. If you access luck99 from Jakarta, Surabaya, Bandung, Medan, or other supported areas, this privacy notice applies to your use. We describe how we handle your data, what third parties may access it, what rights you have, and how to contact us with questions or requests.

What Data We Collect and Use on luck99

We collect your personal information in these categories: account identity (name, date of birth, national ID or passport number), contact details (email, phone number), address, payment information (bank account or e-wallet identifier), and account activity (login times, game history, bets placed, deposits and withdrawals). We collect this information to verify your identity under KYC requirements, process your financial transactions, maintain account security, and comply with local laws.

We require KYC verification before you can deposit or play any game on luck99. When you upload your ID photo on your mobile device, we validate it against government records. We use your verified identity to open your account and link your payment methods. When you deposit via DANA or e-wallet, we record the transaction and verify it against your account details. When you request a withdrawal, we review your identity again to confirm the request is legitimate before processing funds back to your chosen payment method.

Note: We separate your personal identity data from your betting and gaming records in different database systems. This architectural separation means a breach in one area does not automatically expose both.

Third Parties and Data Processors on luck99

We share your data with third parties only when necessary. Our payment processors—the companies that handle mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and bank transfers—receive your transaction details to process deposits and withdrawals. These processors operate under strict confidentiality agreements and use your data only to complete your transaction. Our KYC verification provider validates your identity document and receives your photo and ID details for this verification only. We do not sell your personal data to marketing companies or data brokers.

Our servers and backups may be located outside your jurisdiction for redundancy and performance. We encrypt all data in transit and at rest, so even if data is stored abroad, it is encrypted with keys we control. We do not share your account activity or betting history with third parties unless required by court order or regulatory authority.

Data Retention and Your Rights on luck99

We retain your personal identity information for as long as your account remains active, plus a period after closure as required by Indonesian financial regulations. We retain your transaction history (deposits, withdrawals, bets) for the same period for audit and fraud-prevention purposes. You can request a copy of all personal data we hold about you—we will provide this within five business days. You can request that we delete your personal data if you close your account and no longer use luck99; we will delete data according to our retention obligations under law.

Your privacy is a right, not a trade-off. We encrypt what you share, separate what we store, and share only what the law requires.

luck99 commitment

Cookies and Mobile Session Management

When you access luck99 through a web browser on your phone or desktop, we use session cookies to keep you logged in. These cookies expire after subject to verification of inactivity for security. They contain no personal information—only a session token that links your browser to your encrypted account on our servers. When you use our Android APK, we do not use cookies; instead, we manage your login session directly on the app.

We also use analytics cookies to track which features you use (which games you play, which payment methods you choose, error messages you encounter). These analytics help us improve luck99. We do not use this analytics data to identify you personally—it is aggregated across many account holders to find patterns. You can disable analytics by contacting our support team and requesting to opt out of non-essential tracking.

Account Security Measures

We protect your luck99 account using TLS 1.2 encryption for all communication. We hash your password using a strong algorithm before storage, so we never access your plain-text password. We offer two-factor authentication (2FA) as an optional security layer—once enabled, logging in from a new device requires a one-time code sent to your phone number. We monitor your account for suspicious activity and flag unusual withdrawals for review before processing.

Your payment data is tokenised—we store a reference code instead of your actual card or bank account numbers. When you request a password reset, we send a link to your registered email that expires after subject to verification. Only you can confirm the reset and set a new password. If you believe your account has been compromised, contact our support team immediately and we will review your account activity.

Your Rights and Contacting luck99

You have the right to access all personal data we hold about you, request correction of inaccurate data, and request deletion where legally permitted. You have the right to withdraw consent for data processing (though some data is required to operate your account). To exercise these rights, contact our support team through the in-app Help menu or email. We respond to data-access requests within five business days. You also have the right to lodge a complaint with your local data protection authority if you believe we have mishandled your personal information.

This privacy notice may change as we update our systems and practices. We will notify you of material changes by email or through an in-app notice. Your continued use of luck99 after such changes constitutes acceptance of the updated notice. If you have questions about how we handle your data, contact our support team. We provide support in Indonesian and English and respond within one business day on weekdays and two business days on weekends.

1

Data you provideCollection

Identity, contact details, payment methods, and account activity.
2

How we use itProcessing

KYC verification, payment processing, account security, and fraud detection.
3

How we protect itSecurity

TLS 1.2 encryption, hashed passwords, separated data storage, and tokenised payments.
4

Your rightsAccess

Request access, correction, deletion, and contact us with privacy questions anytime.

Policy Updates and Final Notes

We update this privacy notice periodically as our practices evolve and as regulations change. We will announce material changes through email or an in-app notification. We recommend reviewing this notice regularly to stay informed about how we handle your data. Your continued use of luck99 after any update constitutes your acceptance of the revised notice.

Our privacy practices reflect our commitment to transparent account handling. We collect only what we need to verify your identity, process your transactions, and keep your account secure. We encrypt your data, separate personal from activity records, and share only with trusted processors and required authorities. We do not monetise your personal information through marketing or data sales. If you have any privacy concerns, contact our support team and we will address them promptly.