pt989 Privacy Policy

1.1 This Privacy Policy applies to all personal data collected, processed, and stored by pt989 in connection with your use of the pt989 platform at https://pt989.net, including all sub-pages, the mobile-browser interface, and all associated services such as sports betting, live casino games, slots, and togel (Indonesia's traditional numbers lottery) offerings.

1.2 The data controller responsible for your personal information is pt989, operating as an internationally licensed offshore online betting and casino platform. For all data-related inquiries, pt989 can be contacted through the channels listed in Clause 13 of this Policy.

1.3 This Policy should be read alongside pt989's Terms & Conditions, which govern the overall contractual relationship between pt989 and registered Players. In the event of any conflict between this Policy and the Terms & Conditions on a matter of data handling, this Privacy Policy shall prevail.

1.4 By registering an Account on pt989 or by continuing to use the Platform, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy.

2.1 pt989 collects personal data from you directly (when you register, deposit, or contact support), automatically (through your use of the Platform), and from third-party service providers (such as payment processors and KYC verification platforms). The categories of personal data we collect are set out in the table below:

2.2 pt989 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where facial photograph comparison is strictly required as part of a mandated enhanced KYC review. Any such data collected incidentally is deleted as soon as the verification process is complete.

3.1 pt989 uses your personal data for the following specific purposes:

• Account Management: Creating, maintaining, and securing your registered pt989 Account; authenticating your identity at login; enabling password recovery;
• Transaction Processing: Processing IDR deposits and withdrawals via Indonesian local banks (BCA, BRI, BNI, Mandiri, and others) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja); reconciling financial records;
• KYC Compliance: Verifying your identity, age (21+), and source of funds in accordance with our licensing obligations and international anti-money-laundering standards;
• Service Delivery: Enabling your access to sportsbook markets (including BRI Liga 1, EPL, La Liga, Champions League, and other competitions), live casino games, slots, and all other Platform features;
• Customer Support: Responding to your inquiries, complaints, and dispute submissions via live chat, WhatsApp, and email;
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, account takeovers, money laundering, bonus abuse, and other prohibited conduct described in the Terms & Conditions;
• Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling; implementing deposit limits, cooling-off periods, and self-exclusion measures as requested or required;
• Marketing Communications: Sending promotional offers, bonus notifications, and seasonal campaign information (such as BRI Liga 1 match-day promotions or Ramadhan special offers) to Players who have opted in to marketing communications;
• Platform Improvement: Analysing aggregate usage data to improve Platform performance, user experience, and game content offerings;
• Legal Compliance: Meeting pt989's obligations under applicable international licensing requirements and responding to lawful requests from regulatory or law enforcement authorities.

3.2 pt989 does not use your personal data to make fully automated decisions that produce significant legal effects without human review. Where automated processes are used in fraud detection or responsible gaming monitoring, a human review is conducted before any material action is taken on your Account.

4.1 pt989 processes your personal data on the following legal bases:

4.2 Where pt989 relies on consent as the legal basis for processing (specifically for marketing communications), you have the right to withdraw that consent at any time by contacting support or adjusting your Account notification settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

4.3 Where pt989 relies on legitimate interests, those interests have been assessed and balanced against your rights and interests. pt989 will not process your data on this basis where your fundamental rights override those legitimate interests.

5.1 pt989 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Personal data is shared only in the specific circumstances described below:

• Payment Processors: Indonesian local bank transfer facilitators and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum financial data necessary to process your transactions. These processors are bound by their own data protection obligations;
• KYC & Identity Verification Providers: Third-party identity verification platforms receive identity document images and personal details solely for the purpose of completing your KYC verification. All such providers operate under strict data processing agreements with pt989;
• Fraud Prevention & Security Platforms: Aggregated and anonymised behavioural data may be processed by fraud detection tools to identify account takeover attempts, bot activity, and collusive betting patterns;
• Technology Infrastructure Providers: Hosting, content delivery, and database management providers who process data on pt989's behalf under contractual data protection obligations. These providers do not have independent access rights to your data;
• Customer Support Platforms: Live chat and WhatsApp business platform providers who facilitate communication between you and pt989's support team;
• Regulatory & Law Enforcement Authorities: pt989 may disclose personal data to competent international regulatory authorities or law enforcement agencies where required by law, court order, or as part of an investigation into fraud, money laundering, or other criminal activity. pt989 will notify affected Players of such disclosures where legally permitted to do so.

5.2 All third-party service providers with whom pt989 shares personal data are vetted for data security standards and are contractually required to process data only on pt989's documented instructions, maintain appropriate technical and organisational security measures, and delete or return data upon the termination of their engagement.

6.1 pt989 operates as an internationally licensed offshore platform. Accordingly, your personal data may be transferred to and processed in countries outside Indonesia. Such transfers may occur in connection with the hosting infrastructure, KYC verification platforms, or fraud prevention services used by pt989.

6.2 Where personal data is transferred internationally, pt989 ensures that appropriate safeguards are in place, including:

• Contractual data protection clauses equivalent to internationally recognised standard contractual clauses;
• Transfers only to countries or service providers that maintain data protection standards consistent with internationally accepted principles of data security and individual rights;
• Ongoing monitoring of third-party data processors to ensure continued compliance with contractual data protection obligations.

6.3 You may request information about the specific safeguards in place for any international transfer of your personal data by contacting pt989 support using the details in Clause 13.

7.1 pt989 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, or as required by applicable law, licensing obligations, or anti-money-laundering regulations. The following retention schedule applies:

7.2 Upon the expiry of the applicable retention period, pt989 will securely delete or anonymise personal data so that it can no longer be associated with any individual. Anonymised aggregate data may be retained indefinitely for statistical and platform improvement purposes.

8.1 pt989 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in Transit: All data exchanged between your device and pt989's servers is encrypted using 256-bit SSL/TLS protocols. Connections are enforced over HTTPS at all times;
• Encryption at Rest: Sensitive personal data stored on pt989's servers, including financial data and identity documents, is encrypted using AES-256 encryption;
• Password Security: Account passwords are stored as salted cryptographic hashes. pt989 does not store plaintext passwords and cannot retrieve your password — only reset it;
• Access Controls: Access to personal data within pt989's operations is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and monitored;
• Intrusion Detection: pt989's infrastructure is monitored continuously for signs of unauthorised access, unusual traffic patterns, and potential security incidents;
• Regular Security Audits: pt989 conducts periodic security assessments and penetration testing of its platform infrastructure to identify and remediate vulnerabilities proactively.

8.2 In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, pt989 will notify affected Players without undue delay once the nature and scope of the breach has been assessed and contained. Notification will be provided via the email address registered on your Account.

8.3 While pt989 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is entirely immune to security risks. You are responsible for keeping your Account credentials confidential and for notifying pt989 immediately if you suspect unauthorised access to your Account.

9.1 pt989 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the Platform effectively, maintain your login session, and improve your overall experience. The cookies used by pt989 fall into the following categories:

9.2 pt989 does not deploy third-party advertising cookies, retargeting pixels, or social media tracking cookies. You will not be tracked across other websites for advertising purposes based on your pt989 browsing behaviour.

9.3 You can manage cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will impair or prevent access to the Platform. Disabling functional or analytics cookies will not prevent you from using the core betting and gaming features.

10.1 As a Player on pt989, you hold the following rights in relation to your personal data. These rights may be exercised at any time by contacting pt989 support through the channels in Clause 13:

10.2 pt989 will respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, pt989 may extend this period by a further 30 days, in which case you will be notified of the extension and the reason for it.

10.3 pt989 will not charge a fee for processing data rights requests unless the request is manifestly unfounded or excessive. In such cases, pt989 may charge a reasonable administrative fee or decline to act on the request, with written explanation provided.

11.1 pt989 is strictly an adults-only platform. Access to the Platform is prohibited for individuals under the age of 21 years. pt989 does not knowingly collect personal data from any person under 21 years of age.

11.2 Age verification is a mandatory component of the Account registration and KYC process. Where pt989 has reasonable grounds to suspect that a Player may be under 21 years of age, the Account will be suspended immediately pending age verification. If the Player is found to be under 21, their Account will be permanently closed, any funds will be returned to the payment source where possible, and all personal data will be deleted.

11.3 If you are a parent or guardian and believe that a minor has registered an Account on pt989 using false age information, please contact our support team immediately via live chat or WhatsApp (+62 811 9899 8900) so that we can take swift action.

12.1 pt989 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. Material changes will be communicated to registered Players via a notice displayed prominently on the Platform or by email to the address registered on your Account.

12.2 The "Last Updated" date at the top of this page indicates when the most recent revision was made. pt989 recommends that all Players review this Privacy Policy periodically, particularly following any notification of updates.

12.3 Your continued use of the pt989 Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised Policy, you must cease using the Platform and may close your Account without penalty.

13.1 For all privacy-related inquiries, data rights requests, or concerns about how pt989 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 within the pt989 Platform (WIB — covering Jakarta, Surabaya, Bandung, and all of West and Central Indonesia);
• WhatsApp: +62 811 9899 8900 — available 24/7, including during Indonesian public holidays;
• Email: [email protected] (plain text — not a clickable link);
• Coverage: Serving all of Indonesia — Jakarta, Surabaya, Bali, Medan, Bandung, Yogyakarta, Semarang, Makassar, Palembang, and beyond.

13.2 When submitting a formal data rights request, please include your registered Account username and the email address associated with your Account so that pt989 can verify your identity and process your request efficiently.

13.3 pt989 aims to acknowledge all privacy-related inquiries within one (1) business day (WIB) and to fully resolve standard data rights requests within 30 days of receipt.