hkg99 Privacy Policy

The following defined terms are used throughout this Privacy Policy. Understanding these definitions will help you interpret your rights and our obligations accurately.

hkg99 collects the following categories of Personal Data from players and visitors to the Platform. The specific data points collected depend on the nature of your interaction with hkg99 — some are mandatory for account registration and financial transactions, while others are collected automatically through your use of the Platform.

hkg99 collects Personal Data through the following channels. We are transparent about every collection point so that you can make informed decisions about the data you share with us.

• Direct submission: When you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, contact our support team, or respond to a promotional campaign, you directly provide us with Personal Data.
• Automated collection: When you visit or use the Platform, our servers automatically log Technical Data and Usage Data through standard web server logs, analytics scripts, and session-tracking technologies. This happens regardless of whether you are logged in to your account.
• Third-party payment processors: When you initiate a financial transaction through a local Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the relevant payment provider shares transaction confirmation details — including timestamp, amount in IDR, and masked account reference — with hkg99 to allow us to credit your account.
• KYC and identity verification providers: Where hkg99 engages a third-party KYC provider to verify your identity documents, that provider shares a verification outcome (pass/fail/pending) and, where applicable, extracted identity fields with hkg99. hkg99 does not receive raw biometric data unless you explicitly upload a selfie as part of the KYC process, in which case it is stored securely and processed solely for identity verification.
• Game studios and live casino operators: Where you play live casino games powered by studios such as Evolution Gaming, Pragmatic Play Live, or SA Gaming, those studios may share session data (game ID, round ID, bet amount, outcome) with hkg99 for account reconciliation, dispute resolution, and responsible gaming monitoring purposes.
• Cookies and similar technologies: As described in Clause 09, hkg99 uses cookies, local storage, and session tokens to maintain your login state, remember your preferences, prevent fraud, and analyze Platform performance. See Clause 09 for full details and opt-out instructions.

hkg99 processes your Personal Data only for specific, legitimate purposes. The table below maps each data category to its processing purpose so you can understand precisely why each piece of information is used.

hkg99 will not process your Personal Data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a new lawful basis for processing.

hkg99 processes Personal Data only where it has a valid legal basis for doing so. The principal legal bases on which hkg99 relies are:

• Contractual necessity: Processing that is necessary to perform the contract between hkg99 and the player — including account creation, identity verification, payment processing, and game delivery. Without this processing, hkg99 cannot provide the Services.
• Legal obligation: Processing required to comply with applicable law — including anti-money-laundering regulations, licensing requirements imposed by hkg99's international gaming license, and any disclosure obligations to law enforcement or regulatory bodies where legally mandated.
• Legitimate interests: Processing necessary for hkg99's legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics used to improve the Platform.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications and the use of non-essential cookies. You may withdraw consent at any time by contacting support@hkg99.club or updating your preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

hkg99 does not sell, rent, or trade your Personal Data to unaffiliated third parties for their own marketing purposes. Data is shared only in the following circumstances, each of which is governed by appropriate contractual safeguards:

• Payment processors and banking partners: To execute your deposit and withdrawal instructions in IDR, hkg99 shares the minimum necessary financial and identity data with the relevant Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) or e-wallet operator (OVO, DANA, GoPay, ShopeePay, LinkAja).
• KYC and identity verification providers: To satisfy our age-verification (21+) and anti-money-laundering obligations, hkg99 may share your identity documents and extracted identity fields with licensed KYC verification service providers operating under data processing agreements with hkg99.
• Game studios and platform providers: To deliver live casino, slot, and other game content, hkg99 shares session tokens and account-level data with licensed game studios — including Evolution Gaming, Pragmatic Play, Spribe, Pocket Games Soft, NetEnt, and Microgaming — solely to the extent necessary to initiate, operate, and reconcile game sessions.
• Cloud infrastructure and hosting providers: hkg99's Platform is hosted on secured cloud infrastructure. The hosting provider has access to server-level data as a data processor under contract and may not use that data for any purpose other than providing the hosting service to hkg99.
• Regulatory and law enforcement authorities: Where required by hkg99's international gaming license, applicable anti-money-laundering law, or a valid legal demand from an authorized authority, hkg99 will disclose Personal Data to the extent legally required. hkg99 will notify you of such a disclosure where permitted by law.
• Professional advisers: hkg99 may share Personal Data with its legal counsel, auditors, and compliance advisers on a confidential, need-to-know basis where necessary to obtain professional advice or to establish, exercise, or defend legal claims.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or substantially all of hkg99's business assets, Personal Data held by hkg99 may be transferred to the acquiring entity as part of that transaction, subject to the acquiring entity maintaining equivalent data protection standards.

hkg99 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and licensing obligations. The following retention schedules apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Anonymized, aggregated data that can no longer identify you may be retained indefinitely for statistical and business-intelligence purposes.

hkg99 implements a layered security architecture to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Our core security measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and hkg99 servers. Every page of the Platform is served over HTTPS — there is no unencrypted HTTP endpoint.
• Encrypted data storage: Sensitive fields — including passwords (stored as salted, industry-standard cryptographic hashes), government ID numbers, and bank account references — are encrypted at rest using AES-256 encryption.
• Access controls: Access to production databases and player Personal Data is restricted to authorized hkg99 personnel on a strict need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication (MFA) for all administrative accounts.
• Intrusion detection and monitoring: hkg99's infrastructure is continuously monitored for anomalous activity, unauthorized access attempts, and DDoS attacks by an automated security operations platform with 24/7 alerting.
• Vulnerability management: hkg99 conducts regular security assessments, including automated vulnerability scanning and periodic third-party penetration testing. Critical findings are remediated within 72 hours of discovery.
• Data breach response: In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, hkg99 will notify affected players by email within 72 hours of becoming aware of the breach, and will report to the relevant supervisory authority as required by its licensing obligations.

hkg99 uses cookies and similar technologies (local storage, session tokens, pixel tags) on the Platform for the purposes described below. These technologies are small data files placed on your device when you visit the Platform.

You may manage your cookie preferences at any time by contacting hkg99 support at support@hkg99.club and requesting that non-essential cookies be disabled for your account. Note that disabling functional cookies may affect your Platform experience (for example, your display preferences may not be remembered between sessions). Disabling strictly necessary cookies is not possible, as they are required for basic Platform functionality.

As a data subject whose Personal Data is processed by hkg99, you hold the following rights. hkg99 is committed to facilitating the exercise of these rights in a timely and transparent manner. Requests should be submitted to support@hkg99.club with the subject line "Data Rights Request".

hkg99 will acknowledge all data rights requests within 5 business days and fulfil verified requests within 30 calendar days. Where a request is complex or involves a high volume of data, hkg99 may extend this period by a further 30 days with prior notification to the requestor. hkg99 does not charge a fee for data rights requests unless they are manifestly unfounded or excessive.

As part of our registration process and KYC verification procedures, hkg99 takes reasonable technical and procedural steps to verify that players are at least 21 years of age before allowing access to any real-money gaming or betting features. These steps include requesting a government-issued photo ID (Indonesian KTP or equivalent) that displays the account holder's date of birth.

If you are a parent or guardian and believe your child has registered an account on hkg99 without your knowledge, please contact us immediately at support@hkg99.club. We will investigate and take appropriate action without delay.

hkg99 operates as an internationally licensed gaming platform. As a result, your Personal Data may be transferred to and processed in countries outside Indonesia where hkg99's infrastructure, game studio partners, or KYC providers are located. Such countries may have data protection laws that differ from those applicable in Indonesia.

Whenever hkg99 transfers Personal Data internationally, it ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that described in this Privacy Policy. These safeguards include:

• Contractual protections: hkg99 enters into data processing agreements with all international service providers that incorporate standard contractual clauses requiring the recipient to protect your Personal Data to an equivalent standard.
• Adequacy assessments: Before transferring data to a new jurisdiction, hkg99 conducts a transfer impact assessment to evaluate the legal landscape in the destination country and any risks to your privacy rights.
• Technical safeguards: All data in transit between jurisdictions is protected by TLS 1.2 or higher encryption. Data at rest on international servers is encrypted with AES-256.
• Minimization: hkg99 transfers only the minimum data necessary for the specific processing purpose — for example, a game studio receives a session token and bet amount, not your full KYC record.

By using hkg99's Services, you acknowledge that your Personal Data may be transferred internationally in accordance with the safeguards described in this clause. If you have questions about international transfers or wish to obtain a copy of the safeguards in place for a specific transfer, contact our Data Protection Officer at support@hkg99.club.

hkg99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, licensing requirements, or the Services we offer. The following process governs how we communicate material changes:

• Version control: Each version of this Privacy Policy is identified by an effective date displayed at the top of the document. The current version supersedes all prior versions.
• Notification of material changes: Where a proposed change materially affects your rights or the way we process your Personal Data, hkg99 will notify registered players by email at least 14 days before the change takes effect. The notification will describe the nature of the change, its effective date, and any action required from you.
• Minor updates: Corrections of typographical errors, clarifications that do not alter the substance of the policy, or updates that are required to maintain legal compliance may be made without prior notice. The effective date will be updated accordingly.
• Continued use constitutes acceptance: Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you should close your account before the change takes effect and request deletion of your Personal Data in accordance with Clause 10.

We encourage you to review this Privacy Policy periodically. A link to the current Privacy Policy is available in the footer of every page on the hkg99 Platform.

hkg99 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection law. If you have any questions, concerns, or requests relating to your Personal Data or this Privacy Policy, you may contact the hkg99 DPO through the following channel:

hkg99's customer support team is available 24 hours a day, 7 days a week, including during Indonesian public holidays such as Idul Fitri, Idul Adha, and Nyepi. Indonesian-speaking support agents are available to assist you in your preferred language. All formal data rights requests, however, should be submitted in writing via email to ensure a documented audit trail.

If you are not satisfied with hkg99's response to your data rights request or privacy concern, you have the right to escalate your complaint to the relevant data protection authority or supervisory body with jurisdiction over hkg99's operations, as communicated to you upon request by our DPO.