Privacy Policy — s99sl

s99sl operates the online betting platform at https://s99sl.cam (the "Platform"). This Privacy Policy applies to all visitors, registered users, and anyone who interacts with the Platform or our support channels. It covers how s99sl handles Personal Data in connection with the provision of its betting, gaming, and related services to players based in Indonesia.

s99sl is committed to handling your Personal Data responsibly, transparently, and in accordance with applicable data protection principles. We collect only what we need, retain data only as long as necessary, and give you meaningful control over the information you share with us.

By creating an Account on s99sl or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you must discontinue use of the Platform immediately.

For the purposes of applicable data protection law, the Data Controller responsible for your Personal Data collected via the s99sl Platform is the operating entity behind s99sl (hereinafter "the Company", "we", "us", or "our"). The Company operates the Platform at https://s99sl.cam and is the sole entity that determines the purposes and means by which your Personal Data is processed.

For all privacy-related enquiries, correction requests, deletion requests, or formal data subject rights exercises, you may contact our Data Protection team at the address set out in Section 15 of this policy.

Depending on how you interact with the s99sl Platform, we may collect the following categories of Personal Data:

s99sl collects Personal Data through the following channels and mechanisms:

s99sl processes your Personal Data on one or more of the following legal grounds:

• Contractual Necessity: Processing required to provide the services you have requested — including account management, bet settlement, deposit processing, and withdrawal execution — under the s99sl Terms & Conditions.
• Legal Obligation: Processing necessary to comply with applicable anti-money laundering regulations, age verification requirements, responsible gaming obligations, and any other legal or regulatory duty to which s99sl is subject.
• Legitimate Interests: Processing that serves s99sl's legitimate business interests — including fraud prevention, platform security, system performance monitoring, and improving the user experience — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your explicit consent (for example, for optional marketing communications), you have the right to withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

s99sl uses the Personal Data it collects for the following specific purposes:

• Account Administration: Creating and maintaining your Account, authenticating your identity at login, and managing your Account settings and preferences.
• Service Delivery: Processing bets on sporting events (including BRI Liga 1, EPL, Champions League, and other leagues), casino game sessions, togel (Indonesia's traditional numbers lottery) draws, and all related gaming activities on the Platform.
• Payment Processing: Executing deposits and withdrawals via your registered Indonesian bank account (BCA, BRI, BNI, Mandiri) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), and reconciling transaction records.
• KYC and Fraud Prevention: Verifying your identity to comply with applicable obligations, detecting and preventing fraud, money laundering, collusion, and other prohibited activities.
• Responsible Gaming: Monitoring play patterns to identify potential problem gambling indicators, communicating with players who may benefit from responsible gaming tools, and enforcing self-exclusion periods that you have activated.
• Customer Support: Responding to your enquiries, resolving disputes, and following up on unresolved Account matters via live chat, email, or other support channels.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the Platform's performance, interface, game selection, and overall user experience.
• Security: Protecting the Platform and its users from unauthorised access, malware, denial-of-service attacks, and other security threats.
• Legal Compliance: Retaining records required by law and providing information to relevant authorities when legally obligated to do so.

s99sl does not sell your Personal Data to any third party under any circumstances. We share Personal Data only in the limited situations described below, and only to the extent strictly necessary for each purpose:

The s99sl Platform is operated with infrastructure that may be hosted in data centres outside Indonesia. Where Personal Data is transferred to a jurisdiction that may not provide the same level of data protection as applicable Indonesian law, s99sl implements appropriate safeguards to protect your data, including the use of contractual data processing agreements that impose data protection obligations on the recipient consistent with those applied by s99sl.

By using the s99sl Platform, you consent to the transfer of your Personal Data to servers and processing environments located outside your country of residence, subject to the protections described in this section.

s99sl retains Personal Data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The following general retention periods apply:

• Account Data & Transaction Records: Retained for a minimum of 5 years from the date of your last transaction or Account closure, whichever is later, to comply with anti-money laundering record-keeping obligations.
• KYC Documents: Retained for a minimum of 5 years from Account closure. Where an Account was involved in a fraud or compliance investigation, records may be retained for the duration of that investigation plus an additional 3 years.
• Communications Data: Support transcripts and email correspondence are retained for 2 years from the date of interaction unless the subject matter requires longer retention (e.g., an ongoing dispute or complaint).
• Technical and Automated Data: Raw server logs are retained for 90 days; aggregated and anonymised analytics data may be retained indefinitely.
• Responsible Gaming Records: Self-exclusion records are retained for at least 5 years from the end of the exclusion period to prevent re-registration during any active exclusion.

When Personal Data is no longer required and no legal retention obligation applies, s99sl will securely delete or irreversibly anonymise the data.

s99sl applies a layered security approach to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser and s99sl's servers;
• Password hashing using industry-standard one-way algorithms — s99sl staff cannot read your password;
• Two-factor authentication (2FA) available for all Accounts and required for certain sensitive operations;
• Access controls limiting internal access to Personal Data to employees who require it to perform their role, on a strict need-to-know basis;
• Penetration testing conducted periodically by qualified third-party security specialists;
• Automated anomaly detection that flags unusual login patterns, IP changes, and suspicious transaction sequences for human review;
• Physical security at data centre facilities including biometric access controls and 24/7 on-site security.

s99sl uses cookies and similar tracking technologies to operate and improve the Platform. A "cookie" is a small text file stored on your device by your browser when you visit a website.

Subject to applicable law and any legal retention obligations, you hold the following rights in relation to your Personal Data held by s99sl. To exercise any of these rights, contact us at [email protected]. We will respond to verified requests within 30 days.

If you are a parent or guardian and believe your child or dependent has registered an Account on s99sl, please contact us immediately at [email protected] with the account details. We take such reports seriously and will act promptly to close the Account, reverse any transactions where possible, and delete the associated data.

Age verification is enforced through our KYC process, and s99sl reserves the right to request documentary proof of age at any point during a player's lifecycle on the Platform. For more on our age restrictions and player protection measures, see our Responsible Gaming Policy.

s99sl reserves the right to update this Privacy Policy at any time. Material changes — those that meaningfully affect how we collect, use, or share your Personal Data — will be communicated to registered Account holders via email or an on-screen notification at least 14 days before they take effect.

Non-material changes (such as clarifications to existing language or corrections to typographical errors) will be reflected on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

Your continued use of the Platform after any change takes effect constitutes your acceptance of the revised Privacy Policy. If you object to any change, you should close your Account before the effective date.

For any privacy-related question, data subject rights request, or complaint regarding s99sl's handling of your Personal Data, please contact our Data Protection team. Our Indonesian-speaking support agents are available 24/7 via the Platform's live chat function for general enquiries. For formal data rights requests requiring a written record, please use the email channel below.

If you are not satisfied with s99sl's response to your privacy complaint or data rights request, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.