Privacy Policy — hkg99

For the purpose of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies, or could reasonably be used to identify, a natural person — including name, date of birth, email address, payment account number, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, or deletion.
• "Platform" means the hkg99 website at https://hkg99.cam, its sub-pages, and any related services or applications operated by hkg99.
• "Member" means any individual who has registered a user account on the Platform.
• "KYC" (Know Your Customer) means the identity and age verification process required before a Member may initiate withdrawals or as required by compliance procedures.
• "Third-Party Service Providers" means entities engaged by hkg99 under contractual data-processing agreements to assist in delivering the Platform's services — including payment processors, KYC verification vendors, fraud-detection providers, and licensed game studios.
• "Cookies" means small text files placed on your device by the Platform for the purposes described in Section 08 of this Policy.
• "Data Controller" means hkg99, which determines the purposes and means of processing Member Personal Data.

hkg99 collects the following categories of Personal Data from Members and visitors to the Platform:

2.1 Identity and Contact Data

• Full legal name as it appears on a government-issued identity document.
• Date of birth (used for 21+ age verification).
• Email address (used for account communications, security alerts, and — where you have opted in — promotional notifications).
• Phone number (optional; used for two-factor authentication if enabled).
• City and province of residence within Indonesia (used for localization and fraud-risk assessment).

2.2 Financial Data

• Bank account name and account number for withdrawal processing (BCA, BRI, BNI, Mandiri, CIMB Niaga, and other supported local banks).
• E-wallet account identifier (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Transaction history, including deposit amounts, withdrawal requests, bet records, and bonus utilization — all denominated in Indonesian Rupiah (IDR / Rp).

2.3 Identity Verification (KYC) Data

• Copy of government-issued photo ID (Indonesian National Identity Card / KTP, passport, or driver's license).
• Selfie or liveness-check image captured during the KYC process.
• Supporting documentation requested during enhanced due-diligence reviews, such as proof of address or source-of-funds declarations.

2.4 Technical and Usage Data

• IP address and approximate geolocation at the time of login and transaction.
• Device type, operating system, and browser version.
• Session timestamps, page views, and interaction logs within the Platform.
• Cookie identifiers and similar tracking technologies as described in Section 08.

hkg99 collects Personal Data through the following methods:

• Direct Provision: Information you provide directly when registering an account, completing the KYC process, submitting a withdrawal request, or contacting our support team.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including through cookies, server logs, and similar technologies.
• Payment Processors: Transaction confirmation data (amount, timestamp, reference number) returned by your bank or e-wallet provider upon completion of a deposit or withdrawal.
• KYC Verification Providers: Identity verification results and risk-scoring data returned by our contracted KYC service providers after processing the documentation you submit.
• Fraud Detection Systems: Behavioral analytics and risk signals generated by our platform security systems during your session, used to detect and prevent unauthorized access and fraudulent activity.

hkg99 processes your Personal Data for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with those listed here without first obtaining your consent or notifying you of the new purpose.

hkg99 processes your Personal Data on the following legal grounds:

• Contract Performance: Processing necessary to create and maintain your account, execute deposits and withdrawals, settle bets, and deliver the gaming services you have requested.
• Legal Obligation: Processing required to comply with applicable anti-money-laundering regulations, age-verification requirements, and other legal duties binding on hkg99 as a licensed gaming operator.
• Legitimate Interest: Processing carried out in hkg99's legitimate interests where those interests are not overridden by your fundamental rights — including fraud prevention, platform security, responsible gaming monitoring, and product improvement.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for opt-in marketing communications. You may withdraw your consent at any time by contacting support or updating your account notification preferences.

hkg99 does not sell, rent, or trade your Personal Data. We share data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment Processors and Banks: Your financial identifiers are shared with your nominated payment provider (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) solely to execute the transaction you have initiated. These providers operate under their own privacy policies and are independent data controllers for their portion of the transaction.
• KYC and Compliance Vendors: Identity documents and verification data are shared with contracted KYC service providers under strict data-processing agreements that prohibit any use beyond the verification purpose.
• Licensed Game Studios: Game providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Pocket Games Soft) may receive a session token and pseudonymous player identifier to authenticate your game session. No directly identifiable personal data such as your legal name or bank details is transmitted to game studios.
• Fraud Prevention Networks: Risk signals and device fingerprints may be shared with industry fraud-prevention services to identify and block fraudulent activity across the platform. All data shared for this purpose is pseudonymized.
• Legal and Regulatory Authorities: hkg99 will disclose Personal Data to law enforcement, regulatory bodies, or courts when required to do so by a valid legal order, subpoena, or applicable regulatory obligation. We will notify you of such a disclosure to the extent permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of hkg99's assets, Member Personal Data may be transferred to the acquiring entity. We will notify affected Members prior to any such transfer and provide the opportunity to close their accounts if they do not consent to the new data controller's privacy terms.

hkg99 retains Personal Data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable legal or regulatory obligations. The following retention schedule applies as a general guideline:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with any individual. Anonymized and aggregated statistical data may be retained indefinitely for platform analytics purposes.

hkg99 uses cookies and similar client-side storage technologies to provide a functional, secure, and personalized experience on the Platform. We use only the categories of cookies described below and do not deploy third-party advertising or cross-site tracking cookies.

• Essential Cookies: Required for the Platform to function. These include session authentication tokens (keeping you logged in), CSRF protection tokens (preventing cross-site request forgery), and load-balancing cookies. These cookies cannot be disabled without disabling the Platform itself.
• Preference Cookies: Store your platform preferences such as display language, odds format, and notification settings. Disabling these cookies will cause your preferences to reset on each visit.
• Analytics Cookies: Collect aggregated, anonymized information about how Members navigate the Platform — which pages are visited most frequently, how long sessions last, and where errors occur. This data is used exclusively to improve the Platform. Individual browsing behavior is not tracked across other websites.
• Security Cookies: Used by our fraud-detection systems to distinguish legitimate Members from bots and to detect unusual session patterns that may indicate unauthorized account access.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent access to authenticated areas of the Platform. For instructions on managing cookies in your specific browser, consult your browser's official help documentation.

hkg99 implements a layered security architecture to protect Member Personal Data against unauthorized access, alteration, disclosure, and destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS Encryption on all data transmitted between Member devices and hkg99 servers.
• Encryption at Rest for all sensitive data stored in our databases, including payment identifiers and KYC documents.
• Role-Based Access Controls ensuring that only personnel with a verified operational need can access specific categories of Personal Data.
• Multi-Factor Authentication (MFA) for all internal system access by hkg99 staff.
• Regular Penetration Testing conducted by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Continuous Security Monitoring of server environments, with automated alerting for anomalous access patterns.
• Staff Confidentiality Obligations — all employees and contractors with access to Personal Data are bound by contractual non-disclosure and data-handling obligations.

As a Member of hkg99, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact our support team via live chat in your account dashboard or by email at [email protected]. We will respond to all verified requests within 30 days.

• Right of Access: You may request a copy of the Personal Data hkg99 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any of the Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where we no longer have a legitimate need to retain it. Note that certain data must be retained to satisfy legal obligations (e.g., AML record-keeping requirements) even after account closure; in such cases we will explain why full erasure is not possible.
• Right to Restriction of Processing: In certain circumstances (e.g., while the accuracy of data is contested, or where processing is unlawful), you may request that we restrict the processing of your data to storage only.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request a machine-readable copy of your Personal Data for transfer to another data controller.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interest, including profiling for responsible gaming monitoring. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal can be actioned via your account notification settings or by contacting support.

The Platform is strictly intended for adults aged 21 years and over. hkg99 does not knowingly collect Personal Data from individuals under 21 years of age. Age verification is conducted as part of the KYC process for all Members.

If you believe that a person under the age of 21 has provided Personal Data to hkg99, please contact us immediately at [email protected]. Upon confirmation, we will promptly delete all Personal Data associated with the underage individual, suspend the relevant account, and report the matter to relevant authorities where required by law.

hkg99 operates internationally, and certain Third-Party Service Providers engaged to deliver the Platform's services are located outside Indonesia. As a result, your Personal Data may be transferred to, stored in, and processed in jurisdictions other than your country of residence.

Wherever such transfers occur, hkg99 ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that required within Indonesia. These safeguards include:

• Contractual data-processing agreements with all Third-Party Service Providers that impose data protection obligations consistent with the standards set out in this Policy.
• Transfer only to service providers operating in jurisdictions recognized as providing adequate data protection, or under standard contractual clauses that impose equivalent obligations.
• Strict prohibition on any onward transfer of your Personal Data by a Third-Party Service Provider to additional parties without hkg99's prior written consent.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data as described in this Section. If you have concerns about international data transfers, please contact our support team.

hkg99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, new regulatory requirements, or enhancements to the Platform. The revised Policy will be posted at https://hkg99.cam/privacy-policy with an updated "Last Updated" date at the top of the page.

For material changes — those that significantly affect how your Personal Data is collected, used, or shared — hkg99 will notify active Members via their registered email address at least 14 days before the revised Policy takes effect. Your continued use of the Platform after the effective date of any revision constitutes acceptance of the updated Policy.

If you do not agree to a material change in this Policy, you may close your account by contacting support prior to the effective date. Closure requests submitted before the effective date will be processed under the terms of the version of the Policy in force at the time of the request.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way hkg99 handles your Personal Data, please reach out to our dedicated privacy support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, via the chat widget in your account dashboard. This is the fastest way to receive a response.
• Email: [email protected] — Please include "Privacy Request" in the subject line along with your registered account username so we can locate your record promptly. We aim to respond to all privacy-related email enquiries within 1–6 hours during WIB business hours (08:00–22:00 WIB, UTC+7).