rt999 Privacy Policy

In this Privacy Policy, the following terms carry the meanings defined below unless the context requires otherwise:

• "rt999", "We", "Us", or "Our" refers to the operator of the rt999 online gaming platform accessible at rt999.cam.
• "You", "User", or "Player" refers to any individual who accesses, browses, registers on, or uses any service offered through the rt999 platform.
• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to a name, identification number, mobile number, email address, location data, IP address, bank account details, and any KYC documentation.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, and deletion.
• "KYC" means Know Your Customer — the identity and age verification process rt999 applies to all accounts prior to processing withdrawal requests.
• "Cookies" means small text files placed on your device by the rt999 platform that record session information, preferences, and usage data.
• "Third-Party Service Providers" means companies engaged by rt999 to provide services that support platform operations, including payment processors, fraud detection providers, and game studios.
• "Data Breach" means any accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, Personal Data stored or processed by rt999.

This Privacy Policy applies to all Personal Data collected and processed by rt999 in connection with the operation of the rt999 platform. It covers data collected through:

• The rt999 website at rt999.cam and any associated subdomains;
• The account registration and KYC verification process;
• Deposit and withdrawal transactions processed through Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja);
• Customer support interactions via live chat, email, and WhatsApp;
• Gameplay activity including sportsbook bets, live casino sessions, slot game play, and togel (Indonesia's traditional numbers lottery) participation;
• Cookies and automated data collection technologies as described in Section 8.

This Policy does not apply to third-party websites or services linked from within the rt999 platform. Where rt999 links to external resources, those third parties operate under their own privacy policies, for which rt999 bears no responsibility.

rt999 collects the minimum Personal Data necessary to operate the platform, comply with legal obligations, and provide a secure and personalised experience to Indonesian players. The categories of data we collect are summarised in the table below:

rt999 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where health-related disclosures arise voluntarily in the context of a responsible gaming request (e.g., a player disclosing a gambling-related health concern when requesting self-exclusion). Such disclosures are handled with strict confidentiality and used solely to action the responsible gaming request.

rt999 collects Personal Data through the following methods:

• Direct collection: Data you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, contacting support, or responding to a promotional offer.
• Automated collection: Technical data collected automatically when you access the rt999 platform, including IP address, device identifiers, and session activity logs. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 8.
• Third-party payment providers: When you complete a deposit via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja, the relevant payment provider shares transaction confirmation data with rt999 to verify that your deposit has settled. rt999 does not receive your full bank account credentials from these providers.
• Identity verification partners: Where rt999 uses a third-party KYC technology provider to assist with document verification, that provider may share the result of document checks (verified / not verified) with rt999. The underlying document data is processed in accordance with the KYC provider's own data handling standards, which rt999 contractually requires to meet equivalent security standards to those described in this Policy.
• Publicly available sources: In limited fraud prevention and compliance scenarios, rt999 may cross-reference information you have provided against publicly available sources, such as sanctions lists or public records.

rt999 uses your Personal Data only for the purposes listed below. We do not use your data for any purpose that is incompatible with the reason it was originally collected without first obtaining your explicit consent or as required by law.

• Account management: Creating, maintaining, and securing your rt999 account; processing login authentication and two-factor OTP verification.
• Service delivery: Processing deposits and withdrawals; settling sports bets on BRI Liga 1, EPL, and other markets; crediting casino winnings; delivering togel draw results and payouts.
• Identity & age verification: Confirming that you meet the 21+ age requirement and that the identity information provided at registration is accurate and consistent with KYC documentation.
• Fraud prevention & security: Detecting and preventing account takeovers, bonus abuse, money laundering, multi-accounting, and other prohibited conduct described in the rt999 Terms & Conditions.
• Regulatory compliance: Meeting applicable anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gaming obligations.
• Customer support: Responding to your queries, resolving disputes, processing responsible gaming requests (deposit limits, time-outs, self-exclusion).
• Platform improvement: Analysing aggregated, anonymised usage patterns to improve platform performance, game selection, and user experience for Indonesian players.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates — only where you have not opted out of marketing communications. You may unsubscribe at any time by contacting support.

rt999 processes your Personal Data on one or more of the following lawful grounds:

• Contract performance: Processing that is necessary to fulfil the user agreement between you and rt999 — for example, processing a withdrawal, settling a sportsbook bet, or delivering a bonus you have claimed.
• Legal obligation: Processing required to comply with applicable AML, CTF, KYC, and responsible gaming regulations to which rt999 is subject as a licensed gaming operator.
• Legitimate interests: Processing carried out in rt999's legitimate interest that does not override your fundamental rights — such as fraud detection, platform security monitoring, and anonymised analytics for product improvement.
• Consent: Processing based on your explicit, freely given consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Your Personal Data may be shared with the following categories of recipients:

• Payment processors: Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum data required to process your transactions — typically your account name, account number, and the transaction amount.
• Game studio providers: Licensed game studios including Pragmatic Play, Evolution Gaming, Pocket Games Soft, NetEnt, Microgaming, and Habanero receive session tokens and bet data necessary to deliver their games. These studios do not receive your identity, banking, or contact details.
• KYC verification providers: Where automated document verification technology is used, a KYC partner processes your identity document image to return a verification result. KYC partner data handling is governed by contractual data processing agreements with rt999.
• Fraud prevention and security providers: Third-party risk scoring and device fingerprinting services may process technical data (IP address, device identifier, session behaviour) to flag suspicious activity. These providers do not receive your full identity or banking data.
• Legal and regulatory authorities: rt999 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by a legally binding order, warrant, or applicable law — including AML reporting obligations.
• Professional advisors: Lawyers, auditors, and compliance consultants engaged by rt999 may access Personal Data on a strictly need-to-know basis under confidentiality obligations.

All third-party service providers engaged by rt999 are required by contract to process your data only for the purposes for which it was shared, to maintain appropriate technical and organisational security measures, and to delete or return the data when the engagement ends.

rt999 uses cookies and similar technologies to maintain your session, remember your preferences, and collect anonymised usage statistics that help us improve the platform for Indonesian players. The types of cookies rt999 uses are:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens that keep you logged in during a gaming session. Disabling these cookies will prevent you from using rt999.
• Functional cookies: Remember your preferences such as deposit method, preferred language, and display settings. These cookies are not strictly necessary but improve your experience on return visits.
• Analytics cookies: Collect anonymised data about how users navigate the rt999 platform — including which pages are visited most frequently, where users drop off in registration flows, and how long sessions last. This data is used exclusively to improve the platform and is not linked to your personal identity.
• Security cookies: Used for fraud detection purposes, including identifying unusual login patterns, device changes, and suspicious betting behaviour. These cookies are a component of rt999's anti-fraud infrastructure.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to access password-protected areas of the rt999 platform. rt999 does not use third-party advertising cookies or track your activity on non-rt999 websites.

rt999 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The general retention schedule is as follows:

• Account data and transaction history: Retained for a minimum of 5 years from the date of account closure or last account activity, whichever is later, in accordance with AML record-keeping obligations.
• KYC identity documents: Retained for a minimum of 5 years from the date the document was submitted for verification.
• Customer support records: Retained for 3 years from the date of the support interaction.
• Marketing consent records: Retained for as long as the account is active, plus 1 year following account closure, to evidence consent and opt-out history.
• Technical and log data: Retained for 12 months for security and fraud investigation purposes, after which it is deleted or anonymised.

When retention periods expire, Personal Data is securely deleted or irreversibly anonymised. Anonymised data that cannot be re-linked to an individual may be retained indefinitely for aggregated analytics purposes.

rt999 implements a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• Transport encryption: All data transmitted between your device and the rt999 platform is protected by 256-bit TLS (Transport Layer Security) encryption.
• Password hashing: Passwords are never stored in plaintext. rt999 uses a one-way cryptographic hashing function with per-user salts to store password data. rt999 staff cannot retrieve your password — only reset it.
• Two-factor authentication: rt999 supports SMS OTP (One-Time Password) authentication for login and high-value withdrawal verification. Players are encouraged to enable 2FA on their accounts.
• Access controls: Internal access to Personal Data is restricted on a strict need-to-know basis. Staff who require access to player data for support or compliance purposes are subject to access logging and regular access reviews.
• Server security: rt999 servers are hosted in data centres with physical access controls, 24/7 monitoring, DDoS protection, and regular security patching schedules.
• Penetration testing: The rt999 platform undergoes periodic penetration testing by independent security specialists to identify and remediate vulnerabilities before they can be exploited.

In the event of a confirmed Data Breach that poses a material risk to affected users, rt999 will notify impacted players via their registered email address or mobile number as promptly as operational circumstances allow, and no later than the timeframe required by applicable law.

As an rt999 player, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact our support team at support@rt999.cam or via live chat. We will respond to all data rights requests within 30 calendar days.

If you believe that a minor has accessed or registered on the rt999 platform, please contact our support team immediately at support@rt999.cam. We take underage access seriously and will investigate all reports promptly. Please also visit our Responsible Gaming page for guidance on parental controls and filtering tools that can help prevent underage access to gambling websites.

rt999 operates as an internationally licensed gaming platform, and some of our third-party service providers — including game studios such as Evolution Gaming, Pragmatic Play, and Pocket Games Soft, and technical infrastructure providers — are located outside Indonesia. As a result, your Personal Data may be transferred to and processed in countries other than Indonesia.

Where Personal Data is transferred internationally, rt999 takes reasonable steps to ensure that the receiving party applies a standard of data protection equivalent to that described in this Privacy Policy, including by requiring contractual data processing agreements that impose equivalent security and confidentiality obligations on the recipient.

By registering an account with rt999 and accepting these terms, you acknowledge and consent to the international transfer of your Personal Data as described above.

rt999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. The effective date displayed at the top of this page will be updated whenever the Policy is revised.

Where changes are material — for example, where we add a new category of data collection or a new purpose for processing — rt999 will notify registered players via email or SMS to their registered contact details at least 7 days before the change takes effect. Your continued use of the rt999 platform after that date constitutes acceptance of the revised Policy.

We encourage you to review this Privacy Policy periodically. If you have concerns about any proposed change, please contact our support team before the effective date of the revision.

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how rt999 has handled your Personal Data, please contact us through any of the following channels. Our support team is available 24 hours a day, 7 days a week, including all Indonesian national public holidays.

• Live Chat: Available within the rt999 platform. Average response time under 2 minutes for privacy and data queries.
• Email: support@rt999.cam — for formal data rights requests, please include the subject line "Data Rights Request" and your registered username or mobile number so we can locate your account promptly. Written responses to formal data rights requests are provided within 30 calendar days.
• WhatsApp: +62 811 9999 0000 — suitable for general privacy questions; formal data rights requests should be submitted in writing via email for documentation purposes.

rt999 treats all data protection correspondence with strict confidentiality. Identity verification may be required before rt999 can fulfil access, portability, or erasure requests to ensure we are responding to the legitimate account holder.