Privacy Policy

1 Introduction

kin999 operates an online betting and gaming platform targeted specifically at adult users in Indonesia. We understand that privacy is a fundamental right and that the personal information you share with us must be handled with the utmost care and responsibility.

This Privacy Policy sets out in detail how kin999 collects, processes, stores, and protects your personal data in accordance with applicable international data protection standards, including principles drawn from the General Data Protection Regulation (GDPR) and recognized best practices for cross-border data handling. Where local Indonesian privacy regulations apply, kin999 complies with those standards in addition to our international obligations.

This Privacy Policy applies to all data collected through the kin999 website (https://kin999.cam), mobile interfaces, and any associated applications or services we operate. It should be read in conjunction with our Terms & Conditions and Responsible Gaming policies.

2 Data Controller

For the purposes of applicable data protection law, the data controller responsible for your personal information is the internationally incorporated entity operating the kin999 platform under its gaming license. The data controller determines the purposes for which and the manner in which your personal data is processed.

You may contact the kin999 data protection officer with any privacy-related questions or concerns at [email protected]. We commit to responding to all data protection inquiries within 14 business days.

3 Data We Collect

kin999 collects and processes several categories of personal data to operate the platform, verify your identity, process transactions, comply with legal obligations, and provide customer support. The specific data we collect includes:

3.1 Registration Data

• Full legal name (as it appears on your Indonesian National Identity Card or passport)
• Date of birth (to verify you are at least 21 years of age)
• Email address (primary contact method)
• Indonesian mobile telephone number (for account verification and support)
• Residential address (city and province)
• Username and encrypted password

3.2 Identity Verification (KYC) Data

• Copy of Indonesian National Identity Card (KTP — Kartu Tanda Penduduk) or valid passport
• Proof of address document (utility bill, bank statement, or official correspondence dated within the last three months)
• Bank account details (for Indonesian banks: BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) or e-wallet registration details (OVO, DANA, GoPay, ShopeePay, LinkAja) to verify ownership of payment methods
• Selfie photograph for biometric comparison against identity document (if required during enhanced verification)

3.3 Transaction Data

• Deposit and withdrawal amounts, timestamps, and processing status
• Payment method used (bank name, e-wallet provider, last four digits of account number — we do NOT store full bank account numbers or e-wallet passwords)
• Transaction history for all financial activity on your Account

3.4 Betting and Gaming Data

• All Bets placed, including stake amounts, odds, event details, and settlement outcomes
• Game session data (games played, session duration, win/loss outcomes)
• Bonus claims and wagering progress
• Responsible gaming tool usage (deposit limits, session timers, self-exclusion requests)

3.5 Technical and Usage Data

• IP address, device type, operating system, browser type and version
• Login timestamps, session duration, and geolocation data (derived from IP address to verify jurisdiction)
• Cookies and similar tracking technologies (see Section 10 for details)
• Clickstream data and page navigation patterns (to improve user experience)

3.6 Communications Data

• Records of all communications between you and kin999, including live chat transcripts, email correspondence, and telephone call recordings (when legally permissible and with prior notice)
• Customer support ticket history and resolution notes

4 How We Use Your Data

kin999 processes your personal data for the following specific purposes:

5 Legal Basis for Processing

kin999 processes your personal data on the following legal grounds, aligned with internationally recognized data protection principles:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms & Conditions). This includes account creation, transaction processing, bet settlement, and customer support.
• Legal Obligation: Processing is required to comply with legal obligations, including Know Your Customer (KYC) verification, Anti-Money Laundering (AML) compliance, tax reporting, and regulatory audits mandated by our gaming license.
• Legitimate Interest: Processing is necessary for kin999's legitimate business interests, including fraud prevention, platform security, data analytics for service improvement, and direct marketing to existing customers (subject to opt-out rights).
• Consent: Where required by law, we obtain your explicit consent before processing certain data, such as biometric data for enhanced KYC verification or non-essential cookies for marketing analytics.

6 Data Sharing and Third-Party Disclosure

kin999 does NOT sell, rent, or trade your personal information to third parties for their own marketing purposes. We share your data only in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party service providers to assist with specific operational functions. These providers process data on our behalf under strict confidentiality agreements and are contractually prohibited from using your data for any purpose other than providing services to kin999. Categories of service providers include:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• KYC/AML Verification Providers: Identity verification services that compare submitted documents against government databases and watch lists.
• Game Providers: Licensed software studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) that power our casino, live dealer, and slot gacor games.
• Customer Support Platforms: Live chat and helpdesk software providers that enable our 24/7 support team to assist you efficiently.
• Cloud Hosting and Data Storage: Secure server infrastructure providers that host our platform and databases.

6.2 Legal and Regulatory Authorities

We may disclose your personal data to regulatory bodies, law enforcement agencies, courts, or government authorities when legally required to do so, including but not limited to: (a) compliance with court orders, subpoenas, or legal processes; (b) detection and prevention of fraud, money laundering, or other illegal activity; (c) protection of the rights, property, or safety of kin999, our Members, or the public; (d) regulatory audits or investigations by our licensing authority.

6.3 Corporate Transactions

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified via email and platform notice of any such change in data controller, and the new entity will be bound by the commitments set out in this Privacy Policy.

6.4 Aggregated and Anonymized Data

kin999 may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, analytics, or business intelligence purposes. Such data does NOT constitute personal data under applicable privacy law.

7 Data Retention

kin999 retains your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, accounting, and reporting obligations. Specific retention periods include:

• Account Data: Retained for the duration of your active Account, plus 5 years following Account closure (to meet anti-money-laundering and tax compliance obligations).
• Transaction Records: Retained for 7 years following the transaction date (regulatory and tax requirement).
• KYC Documents: Retained for 5 years following Account closure (regulatory requirement for identity verification records).
• Communications Data: Retained for 3 years (to resolve disputes and provide evidence in case of complaints or legal proceedings).
• Marketing Consent Records: Retained for 3 years following withdrawal of consent (to demonstrate compliance with opt-out requests).

After the applicable retention period expires, kin999 securely deletes or anonymizes your personal data in accordance with our internal data destruction procedures.

8 Data Security

kin999 implements industry-standard technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or damage. Our security measures include:

• 256-Bit SSL Encryption: All data transmitted between your device and kin999 servers is encrypted using Transport Layer Security (TLS) 1.3 protocol, the same encryption standard used by international banks.
• Encrypted Data Storage: Personal data stored in our databases is encrypted at rest using AES-256 encryption.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Only authorized personnel with legitimate business reasons can access Member data, and all access is logged and audited.
• Regular Security Audits: kin999 undergoes regular third-party penetration testing and vulnerability assessments to identify and remediate potential security weaknesses.
• Firewalls and Intrusion Detection: Our servers are protected by enterprise-grade firewalls and intrusion detection systems that monitor for suspicious activity 24/7.
• Data Breach Response Plan: In the unlikely event of a data breach, kin999 maintains a documented incident response plan to contain the breach, assess its impact, and notify affected Members and relevant authorities within 72 hours as required by law.

9 Your Rights

Under applicable data protection law, you have the following rights with respect to your personal data:

• Right of Access: You may request a copy of all personal data kin999 holds about you. We will provide this information free of charge in a commonly used electronic format within 30 days of your request.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you may request that we correct it. You can update most Account information directly via your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected. Note that we may be legally required to retain certain data for compliance purposes even after Account closure.
• Right to Restrict Processing: You may request that we temporarily suspend processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to our processing on legitimate interest grounds.
• Right to Data Portability: You may request a machine-readable copy of your personal data to transfer to another service provider (where technically feasible).
• Right to Object: You have the right to object to processing of your personal data for direct marketing purposes at any time. You also have the right to object to processing based on legitimate interest grounds, subject to kin999 demonstrating compelling legitimate reasons for continued processing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before consent was withdrawn.
• Right to Lodge a Complaint: If you believe kin999 has processed your personal data in violation of applicable law, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

To exercise any of these rights, please contact our data protection officer at [email protected] with "Data Subject Request" in the subject line. We will respond to all requests within 30 days and may require identity verification before processing your request.

10 Cookies and Tracking Technologies

kin999 uses cookies and similar tracking technologies to enhance your experience on the platform, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device by your web browser when you visit our site.

10.1 Types of Cookies We Use

• Essential Cookies: Necessary for the platform to function properly. These enable core features such as login authentication, session management, and security. Essential cookies cannot be disabled without severely impairing platform functionality.
• Performance Cookies: Collect anonymized information about how Members use the platform, such as which pages are visited most often and whether error messages are displayed. This data helps us optimize the user experience.
• Functionality Cookies: Remember your preferences (e.g., language settings, odds format) to provide a more personalized experience on return visits.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising and measure the effectiveness of marketing campaigns. These cookies require your explicit consent and can be disabled via your browser settings or our cookie consent tool.

10.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. Please note that disabling certain cookies (especially essential cookies) may limit your ability to use some features of the kin999 platform. For detailed guidance on cookie management, consult your browser's help documentation.

11 International Data Transfers

kin999 operates under an international gaming license and may transfer your personal data to servers and service providers located outside Indonesia. When we transfer data internationally, we ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

These safeguards include: (a) transferring data only to jurisdictions recognized as providing adequate data protection; (b) implementing Standard Contractual Clauses (SCCs) approved by international data protection authorities; (c) ensuring that recipient service providers maintain security standards equivalent to those described in Section 8 of this Privacy Policy.

12 Children's Privacy

kin999 is an adult-only platform. Our services are not directed at, marketed to, or intended for use by anyone under the age of 21. We do NOT knowingly collect personal data from individuals under 21 years of age. If we discover that we have inadvertently collected data from a minor, we will immediately delete that data and permanently close the associated Account.

If you are a parent or guardian and believe your child has registered an Account on kin999, please contact us immediately at [email protected] so we can take appropriate action.

13 Policy Updates

kin999 reserves the right to update this Privacy Policy periodically to reflect changes in our data handling practices, legal requirements, or platform features. Material changes will be communicated to you via email to the registered email address on your Account and by prominent notice on the platform homepage.

The "Last Updated" date at the top of this document indicates when the Privacy Policy was most recently revised. We encourage you to review this Privacy Policy regularly to stay informed about how we protect your data.

Continued use of the kin999 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must cease using the platform and may request Account closure.

14 Contact Us

For questions, concerns, or requests relating to this Privacy Policy or kin999's data protection practices, please contact our data protection officer:

Email:
[email protected]

Subject Line for Data Protection Inquiries:
"Privacy Policy Inquiry" or "Data Subject Request"

We commit to responding to all privacy-related inquiries within 14 business days and to processing all data subject requests within 30 days as required by law.