Privacy Policy

0vo99 ("we", "us", "our") operates the online gaming and sportsbook platform accessible at https://0vo99.net. In order to deliver our services — including account management, sportsbook betting, live casino, slot games, and financial transactions in Indonesian Rupiah — we necessarily process certain personal data about our registered players.

This Privacy Policy is intended to give you clear, plain-language information about our data practices so you can make informed decisions about your personal information. We are committed to processing personal data responsibly, keeping it secure, and never selling it to third parties for their own marketing purposes.

This policy applies to all personal data collected through the 0vo99 website, any associated mobile applications, and all customer support interactions conducted via live chat or email.

The following terms are used throughout this Privacy Policy with the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person. This includes your name, date of birth, residential address, email address, phone number, financial account details, and any other information that could directly or indirectly identify you.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, and deletion.
• "Controller" — 0vo99, the entity that determines the purposes and means of processing your personal data.
• "Processor" — a third party that processes personal data on behalf of 0vo99, under contractual instruction and data processing agreements.
• "Data Subject" — you, the individual whose personal data is being processed.
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "Cookies" — small text files placed on your device by the 0vo99 platform to enable functionality, measure performance, and personalise your experience.

Depending on how you interact with 0vo99, we may collect the following categories of personal data:

0vo99 collects personal data through the following channels:

• Direct Submission: Information you provide voluntarily when registering an account, completing your profile, submitting KYC documents, initiating a deposit or withdrawal, or contacting customer support.
• Automated Technologies: Technical and behavioural data collected automatically via cookies, web beacons, server logs, and similar tracking technologies each time you visit or interact with the 0vo99 platform. See Clause 9 for full details on our cookie practices.
• Payment Processors: Transaction confirmation data received from Indonesian bank partners and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when you make a deposit or withdrawal.
• Identity Verification Partners: Where we engage specialist third-party KYC providers to assist with document verification, we may receive verification status results from those providers.
• Fraud Prevention Services: Risk signals and flagged indicators from third-party fraud detection tools used to protect platform integrity and prevent money laundering.
• Publicly Available Sources: In limited circumstances, information from publicly available government registers or sanction lists for the purpose of anti-money laundering (AML) screening.

We process your personal data only where we have a lawful basis to do so. The primary purposes for which 0vo99 processes personal data, together with the corresponding legal basis, are set out in the table below:

Where we rely on legitimate interests as the legal basis, we have assessed that our interests are not overridden by your fundamental rights and freedoms. You have the right to object to processing on this basis — see Clause 10.

0vo99 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We share personal data only in the following limited circumstances:

• Payment Service Providers: Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to process your deposits and withdrawals.
• KYC & Identity Verification Providers: Specialist third-party providers engaged to verify identity documents and perform age verification checks receive the minimum data necessary to complete the verification process.
• Fraud Prevention & AML Partners: Risk intelligence providers may receive technical and transaction data for the purpose of detecting and preventing fraud, money laundering, and other financial crime.
• Game Content Studios: Platform providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive a session token and player identifier (never your full name or payment details) to enable game delivery and fair-play verification.
• IT & Infrastructure Providers: Cloud hosting, content delivery, and platform monitoring vendors process data solely on our documented instructions and are bound by data processing agreements.
• Legal & Regulatory Authorities: We will disclose personal data to competent authorities, courts, or regulators when required to do so by applicable law, court order, or our international gaming licence obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of 0vo99's assets, player data may be transferred to the acquiring entity. You will be notified of any such transfer via a notice on the platform or by email prior to the transfer taking effect.

All third-party processors that handle personal data on our behalf are required to maintain confidentiality and adequate technical and organisational security measures, and may not use your data for any purpose beyond delivering the specified service to 0vo99.

0vo99 retains personal data for as long as is necessary to fulfil the purposes described in this policy, or as required by applicable law and our international gaming licence. The following retention guidelines apply:

• Active Account Data: Retained for the full duration of your account's active status and for a minimum period of five (5) years following account closure, to satisfy AML record-keeping and licensing audit requirements.
• KYC Documents: Identity and address verification documents are retained for a minimum of five (5) years from the date of submission or the date of account closure, whichever is later.
• Transaction Records: All financial transaction data, including deposits, withdrawals, bonus credits, and bet settlements, are retained for a minimum of five (5) years in line with financial record-keeping obligations.
• Customer Support Records: Live chat transcripts and email correspondence are retained for three (3) years from the date of the interaction to support dispute resolution and quality assurance processes.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for the full duration of your account plus three (3) years, as evidence of your stated preferences.
• Technical Logs: Server and access logs are retained for up to twelve (12) months for security monitoring and fraud investigation purposes, after which they are anonymised or deleted.

When personal data is no longer required, it is securely deleted or irreversibly anonymised in accordance with our data destruction procedures. Anonymised, aggregated data (which can no longer identify you) may be retained indefinitely for statistical and analytical purposes.

0vo99 applies industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes, but is not limited to:

• SSL/TLS Encryption: All data transmitted between your device and the 0vo99 platform is encrypted using TLS 1.2 or higher, preventing interception by unauthorised third parties during transit.
• Encryption at Rest: Sensitive data fields — including payment details and KYC documents — are encrypted at rest using AES-256 or equivalent industry-standard encryption.
• Access Controls: Access to personal data within 0vo99's systems is strictly restricted to personnel who require it to perform their job functions, governed by role-based access controls and mandatory two-factor authentication.
• Intrusion Detection: Our infrastructure is protected by real-time intrusion detection and monitoring systems that alert our security team to anomalous activity on a 24/7 basis.
• Regular Security Audits: We conduct periodic penetration testing and security reviews of our platform and supporting infrastructure. Game fairness is verified through certified Random Number Generator (RNG) testing.
• Data Breach Response: In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, 0vo99 will notify affected players and relevant authorities within the timeframes required by our licensing obligations and applicable law.

0vo99 uses cookies and similar technologies to operate the platform effectively, remember your preferences, and analyse how our services are used. The following categories of cookies may be placed on your device:

We do not use third-party advertising or retargeting cookies. No data collected via cookies on the 0vo99 platform is shared with advertising networks for the purpose of serving you targeted advertisements on other websites.

You can manage or delete cookies at any time through your browser settings. Note that disabling strictly necessary or fraud prevention cookies may impair your ability to log in or use certain platform features. Full cookie preference controls are available in your account settings panel once logged in.

Subject to applicable law and the limitations described below, you have the following rights in relation to your personal data held by 0vo99:

• Right of Access: You may request a copy of all personal data we hold about you, together with information about how it is being processed. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update most account information directly from your account settings; for KYC documents, please contact support.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to overriding legal obligations — for example, we are required to retain transaction records and KYC documents for a minimum of five years and cannot delete these records on request during the mandatory retention period.
• Right to Restriction of Processing: You may request that we limit our processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request your personal data in a structured, machine-readable format for the purpose of transferring it to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receipt of promotional emails), you may withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal. To opt out of marketing communications, use the unsubscribe link in any marketing email or contact support.

To exercise any of the above rights, please contact our Data Privacy team at [email protected] (plain text — not a clickable link). We will verify your identity before processing any data rights request to protect your account from fraudulent requests made by third parties.

The 0vo99 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. Our registration process includes a mandatory date-of-birth declaration, and our KYC verification procedures are designed to confirm age eligibility before any financial activity is permitted.

If we discover or are notified that an account has been registered by a person under 21 years of age, we will immediately suspend the account, reverse any outstanding balances in accordance with our Terms & Conditions, and permanently delete the personal data associated with that account as soon as our legal retention obligations permit.

Parents and guardians who believe that a minor may have registered on 0vo99 or accessed the platform are encouraged to contact our support team immediately via live chat so that we can investigate and act promptly.

0vo99 operates as an internationally licensed platform. As a result, your personal data may be processed by our team members, third-party processors, or data storage infrastructure located in countries outside Indonesia. These countries may have data protection laws that differ from those in your country of residence.

When we transfer personal data internationally, we take steps to ensure that an adequate level of protection is maintained. These steps may include:

• Transferring to countries that have been determined to offer an equivalent level of data protection.
• Using contractual safeguards (Standard Contractual Clauses or equivalent instruments) with the recipient entity.
• Transferring to processors that have adopted recognised data security frameworks and certifications.

By using the 0vo99 platform, you acknowledge and consent to the transfer of your personal data to countries outside Indonesia for the purposes described in this Privacy Policy, subject to the safeguards described above.

The 0vo99 platform integrates game content from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. When you launch a game from one of these providers, a session is established directly with the studio's game server. These studios are independent data controllers in respect of any data they collect through their game engines and are subject to their own privacy policies.

0vo99 limits the player data passed to game studios to the minimum necessary for game delivery — typically a pseudonymous session token and a non-personally-identifiable player reference. Your full name, payment details, and contact information are never shared with game studios for purposes beyond what is strictly required to operate the relevant game.

0vo99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or licensing requirements. When we make material changes to this policy, we will:

• Update the "Last Updated" date displayed at the top of this page.
• Where practicable, notify registered account holders of the changes via an in-platform notification or by email to the address on record.
• Where required by applicable law, seek fresh consent before applying the updated policy to existing accounts.

We encourage you to review this Privacy Policy periodically. Your continued use of the 0vo99 platform following the publication of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with any amendment, please cease using the platform and contact our support team to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please reach out to our team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week — including Indonesian public holidays such as Idul Fitri and Indonesian Independence Day — directly from the 0vo99 platform. This is the fastest channel for urgent data rights requests.
• Email: [email protected] (plain text — this is not a clickable link; please copy and paste the address into your email client). Include "Privacy Request" in your subject line to ensure your message is routed to our Data Privacy team.
• Response Time: We aim to acknowledge all written privacy enquiries within 24 hours (WIB, UTC+7) and provide a substantive response within 30 calendar days. Complex data subject access requests may require additional time, in which case we will notify you of the extended timeline.