This Privacy Policy explains how pso99 collects, processes, stores, and protects the personal data of players across Indonesia. We are committed to handling your information with transparency, integrity, and full respect for your rights as a data subject.
This Privacy Policy forms part of the agreement between you and pso99. By registering an Account or using the pso99 Platform, you acknowledge that you have read, understood, and consent to the data practices described in this document. This Policy should be read together with our Terms & Conditions.
pso99 ("we", "us", "our", "the Company") operates the online betting and casino platform accessible at pso99.cam. As operator of that platform, pso99 acts as the data controller for all personal data collected from players ("you", "the Player", "the User") who register and interact with our services.
We recognise that privacy matters to everyone, and that Indonesian players entrust us with sensitive financial and identity information every time they deposit, withdraw, or verify their accounts. This Policy sets out, in plain language and precise legal terms, exactly what data we collect, why we collect it, who we share it with, how long we keep it, and what rights you have over it.
pso99 does not sell personal data. We do not share personal data with advertisers. We use data only for the purposes described in this Policy, and we apply appropriate technical and organisational safeguards to keep it secure.
The data controller responsible for your personal data is pso99, the operator of the platform at pso99.cam. For all data-related enquiries, requests, or complaints, the designated point of contact is our Privacy Team, reachable at the contact details in Section 15 of this Policy.
Where pso99 engages third-party processors to handle data on its behalf — for example, payment processors, KYC verification providers, or analytics tools — those parties act strictly as data processors under written contractual obligations that prohibit them from using your data for any purpose beyond the specific service they provide to pso99.
pso99 collects only the personal data that is necessary to provide and improve our services, fulfil legal obligations, and protect the security of the platform and its players. The categories of data we collect are as follows:
pso99 collects personal data through the following channels:
The table below sets out each primary purpose for which pso99 processes personal data and the corresponding legal basis under applicable data protection law:
| Purpose | Categories of Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, contact | Contract performance |
| KYC identity verification | Identity, KYC documents | Legal obligation; contract performance |
| Processing deposits and withdrawals | Financial, identity | Contract performance |
| Providing betting and gaming services | Betting activity, financial | Contract performance |
| Anti-money-laundering (AML) compliance | Financial, identity, transaction | Legal obligation |
| Fraud prevention and account security | Technical, identity, financial | Legitimate interests |
| Responsible gaming monitoring | Betting activity, financial | Legal obligation; legitimate interests |
| Customer support and dispute resolution | Communications, identity | Contract performance; legitimate interests |
| Platform analytics and improvement | Technical, usage | Legitimate interests |
| Promotional communications (where opted-in) | Contact, betting activity | Consent |
Where pso99 relies on legitimate interests as a legal basis, we have assessed that our interests do not override your fundamental rights and freedoms, and that the processing is proportionate to the legitimate objective pursued.
pso99 does not sell, rent, or trade personal data to third parties for their own marketing purposes under any circumstances. Data sharing is limited to the following categories of recipients, each bound by strict confidentiality and data processing obligations:
To process deposits and withdrawals, pso99 shares necessary transaction data (account holder name, account number, amount, transaction reference) with the relevant bank or e-wallet operator. This includes BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja. Each provider processes this data under its own privacy obligations as a regulated financial institution.
To fulfil our KYC obligations, pso99 may share identity documents and personal data with authorised third-party identity verification providers. These partners are prohibited from using the data for any purpose other than performing the verification service.
pso99 may share minimal identifying data with fraud prevention databases and sanctions-screening services to detect and prevent money laundering, identity fraud, and other financial crimes. This sharing is required by our compliance obligations.
pso99 will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction when required to do so by binding legal process, court order, or applicable law. We will notify affected Players of such disclosures where legally permissible.
pso99 uses third-party cloud hosting, analytics, and customer support technology providers to operate the Platform. These providers act as data processors under written data processing agreements and may not use personal data for their own purposes.
The pso99 Platform serves players primarily located in Indonesia. Some of our technology providers and data processors operate infrastructure in jurisdictions outside Indonesia. Where personal data is transferred internationally, pso99 ensures that appropriate safeguards are in place — including standard contractual clauses, binding corporate rules, or equivalent data protection mechanisms — to protect your data to a standard equivalent to that applicable in Indonesia.
By using the Platform, you acknowledge and consent to the transfer of your personal data to these jurisdictions for the purposes described in this Policy, subject to the safeguards noted above.
pso99 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML legal obligation; dispute resolution |
| KYC identity documents | Duration of account + 5 years post-closure | Regulatory compliance |
| Financial transaction records | 7 years from transaction date | Financial regulations; tax obligations |
| Betting and gaming history | 5 years from record creation | Dispute resolution; responsible gaming audits |
| Support and communications records | 3 years from last interaction | Quality assurance; dispute resolution |
| Technical and session logs | 12 months | Security monitoring; platform analytics |
| Marketing opt-in records | Until consent withdrawn + 2 years | Consent audit trail |
On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with pso99's data destruction procedures.
pso99 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These include:
Despite these measures, no internet-based system is completely immune to security threats. You are responsible for maintaining the confidentiality of your pso99 Account credentials. Do not share your password with anyone, and contact pso99 support immediately if you suspect unauthorised access to your Account.
pso99 uses cookies and similar tracking technologies to operate the Platform, maintain session security, understand usage patterns, and improve the player experience. The categories of cookies used are:
These cookies are essential for the Platform to function. They manage your session authentication, remember your login state, and ensure secure navigation. They cannot be disabled without significantly impairing Platform functionality.
These cookies collect anonymised or aggregated data about how Players interact with the Platform — for example, which pages are visited most frequently, where errors occur, and how navigation flows perform. This data is used solely to improve Platform performance and user experience. pso99 does not share this data with advertising networks.
These cookies store your preferences — such as language settings, display preferences, and last-visited page — so that the Platform can provide a more personalised experience during your session and on return visits.
Most modern browsers allow you to view, manage, and delete cookies through the browser's settings menu. Disabling strictly necessary cookies will impair your ability to log in or use the Platform normally. Disabling performance or functional cookies will not prevent access to the Platform but may reduce the quality of your experience.
As a Player whose data is processed by pso99, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our Privacy Team using the details in Section 15. pso99 will respond to all rights requests within 30 days of receipt.
Request a copy of all personal data pso99 holds about you, along with details of how it is used and who it is shared with.
Request correction of any inaccurate or incomplete personal data held about you. Account profile details can also be updated directly via your account settings.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies. Note: regulatory retention obligations may limit full erasure.
Request that pso99 limit processing of your data — for example, while an accuracy dispute is resolved, or pending a decision on an erasure request.
Request a machine-readable export of the personal data you provided to pso99, in a format that can be transmitted to another service provider where technically feasible.
Object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes. pso99 will cease such processing unless compelling legitimate grounds override your objection.
Exercising your data rights will not affect the lawfulness of processing that took place before your request. Some rights may be limited where data is required for legal compliance, fraud prevention, or active dispute resolution. pso99 will notify you if a restriction applies to your specific request.
pso99 does not knowingly collect personal data from persons under the age of 21. The Platform is strictly for adults aged 21 and over. Age is verified as part of the KYC process, which is mandatory before any withdrawal can be processed.
If pso99 becomes aware that personal data has been collected from a person under 21, the Account will be immediately suspended, all data associated with the minor will be deleted or returned in accordance with applicable law, and any funds deposited will be returned to the source payment method.
If you are a parent or guardian and believe your child has registered on pso99, please contact our Privacy Team immediately using the details in Section 15. We will investigate and act promptly.
The pso99 Platform integrates third-party game content from providers including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, and Pocket Games Soft. These providers deliver games within the pso99 environment and may collect game session data for their own operational purposes in accordance with their own privacy policies. pso99 is not responsible for the data practices of third-party game studios beyond the contractual obligations we impose on them as processors.
The pso99 Platform does not contain links to external third-party websites. Where any third-party service is accessed in connection with pso99 (for example, a payment provider's authentication page), that service operates under its own privacy policy, which you should review independently.
pso99 reserves the right to amend this Privacy Policy at any time. Material changes — those that substantively affect the rights or expectations of Players — will be communicated by email to the registered address at least 7 days before the revised Policy takes effect, and by a prominent notice on the Platform.
Non-material changes, such as typographical corrections or clarifications that do not alter the substance of any section, may be made without advance notice. The "Last updated" date at the top of this Policy will always reflect the most recent revision.
Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not accept the changes, you should close your Account before the effective date and contact the Privacy Team to exercise any applicable data rights.
For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your personal data, please contact pso99's Privacy Team through the following channels. All contact details are displayed as plain text only — they are not clickable links.
If you are not satisfied with pso99's response to a privacy concern, you have the right to escalate the matter to the relevant supervisory authority in your jurisdiction.
Six practical commitments that reflect pso99's approach to data protection across every interaction with Indonesian players.
Every data transmission between your device and pso99 is secured with enterprise-grade 256-bit SSL/TLS encryption — the same standard used by major Indonesian banks including BCA and BRI.
pso99 does not sell, rent, or share your personal data with advertisers or data brokers under any circumstances. Data sharing is limited strictly to service delivery and legal compliance.
Access, correct, export, restrict, or delete your personal data at any time by contacting the pso99 Privacy Team. All requests are acknowledged within 24 hours and resolved within 30 days.
pso99 publishes exactly how long each category of data is retained — no open-ended storage. Data is securely deleted or anonymised as soon as its retention period expires.
Identity documents submitted for KYC are encrypted at rest and accessible only to authorised verification staff. Documents are never used for marketing or shared beyond our compliance and verification partners.
In the event of a data breach that poses material risk to you, pso99 will notify you promptly and transparently, describing what happened, what data was involved, and what steps are being taken.
Our FAQ answers the most common account and security questions. You can also read our full Terms & Conditions or head back to the homepage.