Privacy Policy

This Privacy Policy ("Policy") is issued by sr9999, the online gaming and sports betting platform operated at https://sr9999.net ("sr9999", "we", "us", "our"). It describes how we collect, use, store, share, and protect the personal data of individuals ("you", "your") who visit, register on, or otherwise interact with the sr9999 platform, including its website, mobile interface, and all associated sub-domains.

This Policy applies to all personal data processed in connection with the provision of sr9999's Services, including account registration, identity verification (KYC), deposits and withdrawals in Indonesian Rupiah (IDR), sportsbook betting, casino gameplay, and customer support interactions. It applies regardless of whether you access the platform from Jakarta, Surabaya, Bandung, Medan, Bali, or any other location in Indonesia.

By registering an account on sr9999 or continuing to use the platform after this Policy has been made available to you, you acknowledge that you have read and understood how your personal data will be handled as described herein.

sr9999 collects the following categories of personal data, depending on your level of interaction with the platform:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required for responsible gaming assessments and with your explicit consent.

sr9999 collects personal data through the following means:

• Directly from you — when you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, or contact our customer support team;
• Automatically — through cookies, server logs, and analytics tools when you navigate the sr9999 platform (see Section 7 on Cookies for full detail);
• From payment providers — transaction confirmation data received from Indonesian bank transfer systems and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) as part of processing your deposit or withdrawal;
• From identity verification services — where sr9999 engages a third-party KYC or fraud-prevention provider to cross-check identity documents, we may receive verification status data from that provider;
• From game providers — aggregated session and game-round data supplied by licensed studio partners such as Pragmatic Play, Evolution Gaming, and Spribe in order to settle bets and calculate balances correctly.

sr9999 uses personal data for the following specific purposes:

• Account creation and management: to register your account, authenticate your identity at login, and maintain accurate account records;
• Identity verification (KYC): to verify that you are at least 21 years of age, a resident of Indonesia, and the legitimate holder of the payment method linked to your account;
• Transaction processing: to receive deposits and process withdrawal requests in IDR via your nominated Indonesian bank or e-wallet, and to maintain accurate financial records;
• Service delivery: to provide access to sportsbook markets, live casino tables, slot games, and all other platform features you use;
• Fraud prevention and security: to detect and investigate suspicious account activity, multi-accounting, bonus abuse, money laundering attempts, and other prohibited conduct;
• Responsible gaming compliance: to monitor gaming patterns that may indicate problem gambling, to apply self-imposed limits you have set, and to respond to responsible gaming requests;
• Customer support: to respond to your queries, process complaints, and maintain records of support interactions;
• Marketing communications: to send you promotional offers, bonus notifications, and platform updates — but only where you have provided consent or where a legitimate interest applies. You may opt out at any time;
• Legal and regulatory compliance: to fulfil obligations under applicable international gaming regulations and anti-money-laundering standards, and to respond to lawful requests from competent authorities;
• Platform improvement: to analyse aggregated, anonymised usage data in order to improve the performance, design, and content of the sr9999 platform.

sr9999 processes personal data on the following legal bases in accordance with internationally recognised data protection principles:

• Contractual necessity: processing required to create and operate your account, execute deposits and withdrawals, settle bets, and provide the Services you have requested;
• Legal obligation: processing required to comply with applicable anti-money-laundering obligations, age verification requirements, and lawful orders from regulatory or law enforcement authorities;
• Legitimate interests: processing carried out to detect and prevent fraud, ensure platform security, conduct responsible gaming monitoring, and improve our services — where these interests are not overridden by your rights and freedoms;
• Consent: processing of data for marketing communications and optional personalisation features, where your freely given, specific, and informed consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

sr9999 does not sell, rent, or trade your personal data. We share it only in the following limited circumstances:

• Payment processors and banking partners: financial data is shared with your nominated Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to the extent necessary to execute your deposit or withdrawal;
• KYC and identity verification providers: identity documents and related data are shared with contracted third-party verification services under strict confidentiality agreements to facilitate age and identity checks;
• Game studios and platform technology providers: session and account data is shared with licensed game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe) to the extent required to run games and settle outcomes accurately;
• Fraud prevention and security services: technical and behavioural data may be shared with specialist fraud-detection providers to protect the integrity of the platform and all players;
• Legal and regulatory authorities: sr9999 will disclose personal data to competent authorities where required by a valid legal order, court order, or applicable regulatory obligation. We will, where legally permissible, notify you of such a request;
• Business transfers: in the event of a merger, acquisition, or sale of all or substantially all of sr9999's assets, personal data may be transferred to the successor entity, subject to the same protections described in this Policy.

sr9999 uses cookies and similar tracking technologies to operate the platform, maintain your session, detect fraud, and — where you have consented — to understand how players use the site so we can improve it.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary or security cookies may prevent you from logging in or using core platform features. sr9999 does not use third-party advertising or retargeting cookies.

sr9999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and sr9999's servers;
• Encryption of sensitive data at rest, including identity documents and financial records;
• Role-based access controls ensuring that only authorised sr9999 personnel with a specific operational need can access personal data;
• Multi-factor authentication requirements for all administrative access to production systems;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Continuous monitoring of platform infrastructure for anomalous activity or intrusion attempts;
• Formal incident response procedures that include mandatory breach notification timelines.

Despite these measures, no system connected to the internet can be guaranteed to be entirely secure. In the event of a data breach that poses a significant risk to your rights, sr9999 will notify affected players as promptly as practicable and take all reasonable steps to contain and remediate the incident.

sr9999 retains personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable compliance obligations. The following general retention schedule applies:

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with you. Anonymised, aggregated data may be retained indefinitely for analytical purposes.

As a data subject, you hold the following rights in relation to your personal data held by sr9999. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and your registered account username. We will respond within 30 days of receiving a valid request.

We will not charge a fee for processing a rights request unless it is manifestly unfounded or excessive, in which case we may apply a reasonable administrative fee or decline the request with written explanation.

sr9999 implements mandatory age verification during account registration and as part of the KYC process. If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete all associated personal data, and return any deposited funds to the originating payment method.

If you are a parent or guardian and believe that a minor may have registered on sr9999 using your details or their own, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

sr9999 operates as an internationally licensed platform. Some of the third-party service providers we engage — including game studios, KYC verification partners, and cloud infrastructure providers — may process personal data on servers located outside Indonesia.

Where personal data is transferred internationally, sr9999 ensures that appropriate safeguards are in place, including:

• Contractual clauses in agreements with service providers that require equivalent data protection standards to those described in this Policy;
• Transfer of data only to jurisdictions or providers that maintain adequate security and confidentiality standards as assessed by sr9999's internal compliance review;
• Minimisation of the data transferred internationally to only what is strictly necessary for the specific service being provided.

By using the sr9999 platform, you acknowledge and consent to the international transfer of your personal data under the safeguards described above.

sr9999 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable legal requirements, or the services we offer. The effective date at the top of this document will be updated to reflect the date any revised version takes effect.

Where changes are material — for example, where we introduce a new purpose for processing your personal data or change how long we retain it — we will notify you by posting a prominent notice on the sr9999 platform and, where practicable, by contacting you at the email address registered to your account, with a minimum of 7 days' advance notice before the changes take effect.

Your continued use of sr9999 following notification of a material update constitutes your acceptance of the revised Policy. If you do not agree to the updated Policy, please contact support to close your account and arrange the return of any outstanding Real-Money Balance.

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a privacy concern, please contact the sr9999 support team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Enquiry" or "Data Rights Request"
• Live Chat & WhatsApp: Available via the Help Center after login, daily 08:00–24:00 WIB

Please include your registered account username and a clear description of your enquiry so that our team can respond efficiently. We aim to acknowledge all privacy-related communications within 2 business days and to provide a substantive response within 30 calendar days.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to an independent dispute resolution body as described in the sr9999 Terms & Conditions.